embetos[.]com

The domain embetos.com was registered on July 24, 2025 through the registrar MAT BAO CORPORATION and is currently listed as offline. DNS resolution points to the IPv4 address 57.129.97.29, which belongs to the OVH SAS network (AS16276) located in Germany. The domain resolves to a single nameserver, indicating a minimal DNS footprint. No TLS certificate is presented, meaning the site was served over plain HTTP before being taken down. The page title observed during the brief active period reads "EMBETOS | Enter the world of sport and stakes!", which aligns with the declared scam type of a crypto gambling operation.

The threat actor explicitly mimics the brand Blast, classifying the activity as brand impersonation. Malware and URL analysis on VirusTotal recorded two positive detections out of ninety‑five scanners, confirming that at least a subset of security engines flagged the domain as malicious. Independent reputation services assign very low trust scores: Gridinsoft rates the site 0 out of 100 and Scamadviser 16 out of 100, reflecting a high likelihood of fraudulent intent. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy feed, indicating that several defensive platforms have already incorporated it into their deny lists.

The phishing kit identified as "Gambler Scam" suggests reuse of a known cryptocurrency gambling template, which often solicits user deposits or wallet credentials under the guise of a sports betting platform. Evidence gaps remain regarding the specific phishing pages, payloads, or any harvested credentials, as the site was taken offline before a full content crawl could be performed. Defenders should continue to block the IP 57.129.97.29 and the domain embetos.com at DNS and proxy layers, monitor for any resurgence of the same hosting infrastructure, and update web‑filter rules to include the observed page title and scam kit signature.