ubbet[.]casino

The domain ubbet.casino is currently active and resolves to the Amazon‑owned address 52.76.9.100 located in Singapore (AS16509). The site presents a Chinese page title that translates to “Register without real‑name verification, unlimited IP, USDT leading brand – Ub.Bet”, indicating an attempt to market a cryptocurrency gambling service. The hosting stack consists of Apache serving a WordPress installation backed by MySQL, with additional components built on Node.js, Vue.js, and Nuxt.js, suggesting a multi‑framework deployment that may be used to host credential‑stealing forms or malicious scripts. The domain was registered on 21 February 2026 through GoDaddy.com, LLC and uses the standard GoDaddy nameservers ns39.domaincontrol.com and ns40.domaincontrol.com.

A Let’s Encrypt certificate (issued by the E7 intermediate) secures the site, and the HTTP response returns status 200, confirming that the web server is reachable and delivering content. Static analysis on VirusTotal shows that one of ninety‑three security vendors flagged the domain, and the site appears on the PhishDestroy blocklist as well as a single additional security blocklist. Independent scoring by Gridinsoft assigns a trust rating of 0 out of 100, further reinforcing the malicious assessment. No other public blocklists or safe‑browsing services are listed in the supplied data.

Given the combination of a high‑risk cryptocurrency gambling narrative, the presence of a trusted TLS certificate, and the observed detection by at least one vendor, defenders should treat ubbet.casino as a high‑confidence phishing or scam host. Network defenders should block outbound connections to 52.76.9.100 and add ubbet.casino to URL filtering policies. Incident responders should monitor for credential‑theft payloads targeting users who may be lured by promises of USDT gambling, and threat‑intel teams should enrich this indicator with any observed payload hashes or phishing email samples that reference the domain.