x-jett[.]com

The domain x-jett.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently taken offline. Infrastructure analysis shows the domain resolves to IP address 172.67.176.89, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are melody.ns.cloudflare.com and west.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. TLS termination is provided by a Google Trust Services certificate issued to the WE1 organization, confirming a valid HTTPS endpoint at the time of observation.

The page title retrieved from the site reads "X-jett: Most Popular Online Crypto Casino Based on Blockchain," and the campaign has been classified as a Crypto Scam employing the Gambler Scam phishing kit. VirusTotal scans recorded 16 detections out of 93 participating security vendors, demonstrating moderate detection consensus. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, reinforcing its malicious reputation.

While the site is no longer reachable, defenders should continue to enforce block rules for the domain and its associated IP address, monitor for new domains registered with NiceNIC that exhibit similar naming patterns, and watch for additional Cloudflare‑hosted assets referencing the same certificate chain. Because the underlying hosting provider is shared among many legitimate services, care should be taken to avoid false positives when applying network‑wide blocks, but the documented indicators of compromise (IoC) warrant inclusion in threat‑intel feeds and endpoint protection signatures. Ongoing vigilance is advised to detect any re‑use of the compromised infrastructure in future crypto‑related phishing operations.