xlombet[.]com

The domain xlombet.com was registered on October 29, 2025 through Dominet (HK) Limited and currently resolves to the Cloudflare‑hosted address 104.21.74.3, identified as AS13335 in the United States. The site has been taken offline, yet historical analysis shows it was flagged by 12 of 95 VirusTotal security vendors, indicating a notable detection rate for malicious content. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist, reinforcing its reputation as a high‑risk resource. The page title retrieved during the brief online period reads "Xlombet: Most Popular Online Crypto Casino Based on Blockchain," and the threat classification is listed as a crypto scam employing a Gambler Scam phishing kit.

No SSL certificate was observed, meaning connections would have been unencrypted. The nameservers malavika.ns.cloudflare.com and sergi.ns.cloudflare.com are standard Cloudflare entries, confirming the use of a third‑party CDN. The domain is also referenced in one AlienVault OTX pulse, providing an additional indicator of compromise.

PhishDestroy has actively blocked the domain, and its inclusion in existing blocklists suggests that defensive controls should continue to deny traffic to xlombet.com and its associated IP 104.21.74.3. Security teams are advised to update URL filtering policies, monitor for any resurgence of the domain or related subdomains, and consider adding the IP to network‑level deny lists. Because the site is currently offline, real‑time content analysis is unavailable, but the documented indicators—registrar details, detection counts, trust score, lack of TLS, and known phishing kit—provide sufficient evidence for continued mitigation and threat‑intel sharing.