jelavo[.]com

On July 24, 2026 analysts observed that the domain jelavo.com was taken offline but left a forensic trail consistent with a crypto‑focused phishing campaign. The site previously presented the page title "Jelavo: Most Popular Online Crypto Casino Based on Blockchain," suggesting an attempt to lure victims with a cryptocurrency gambling premise. Registration data shows the domain was created on August 27, 2025 through Web Commerce Communications Limited, and it resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States). The domain uses Cloudflare’s default nameservers daniella.ns.cloudflare.com and vin.ns.cloudflare.com, indicating reliance on a reputable content‑delivery network to mask the true hosting location.

No SSL certificate was detected, meaning the site offered only HTTP connections, a characteristic often exploited to avoid the overhead of certificate management in short‑lived campaigns. The infrastructure received a Gridinsoft trust score of 0 / 100 and appears on a single security blocklist, reinforcing its malicious intent. PhishDestroy has already blocked the domain, and VirusTotal analysis recorded eight detections out of ninety‑five scanners, confirming that multiple security vendors flagged the site as malicious. The phishing kit identified as “Gambler Scam” aligns with the casino‑themed lure indicated by the page title.

While the site is currently offline, defenders should continue to deny any network traffic to 188.114.97.3 and monitor for newly registered domains that use the same registrar or similar naming patterns. Additional vigilance is advised for any HTTP‑only services that reference crypto gambling, as they may be part of the same campaign infrastructure.