dambetx[.]pro

Analysis of dambetx.pro indicates a crypto-themed phishing domain targeting online gambling users, classified under the Gambler Scam kit. The domain was registered via SC-GLOBAL-DATA-20040120 (ASN 42624) and resolved to IP 69.5.189.56, hosted under AS42624 Global-Data System IT Corporation in Switzerland. Nameservers were delegated to ns1.nameserverhub.com through ns4.nameserverhub.com, a pattern consistent with bulletproof infrastructure observed in prior phishing campaigns. The SSL certificate was issued to Internet Widgits Pty Ltd, a generic issuer commonly associated with fraudulent domains. At the time of assessment, the site displayed the page title 'DAMBETX | Play at the best online casino based on Blockchain,' confirming its crypto-gambling lure.

Detection coverage remains limited but targeted: two of 95 security vendors on VirusTotal flagged the domain, while three independent blocklists (PhishDestroy, MetaMask, and SEAL) have implemented blocks. Trust scores from Scamadviser and Gridinsoft both returned 1/100, reinforcing the elevated risk classification. The domain is currently offline, though defenders should note that takedowns of such infrastructure are often temporary. Uncertainties include the exact duration of operation, the volume of victim interactions, and whether the phishing kit harvested credentials, crypto wallet addresses, or financial details.

The Gambler Scam kit typically employs fake login portals and deposit prompts, though specific payloads on this instance have not been confirmed. Defenders are advised to treat all resolutions of 69.5.189.56 and domains registered under AS42624 with heightened scrutiny. Monitor for re-registration under similar names (e.g., dambetx.live, dambetx.io) or shifts to new IPs within the same ASN. Blocklist integration of the domain, IP, and nameserver infrastructure is recommended for enterprise environments, particularly those handling crypto or financial services.