zigbet[.]top

The domain zigbet.top was registered on September 09, 2025 through NameSilo, LLC and is currently listed as taken offline. DNS resolution points to the IPv4 address 57.129.97.29, which belongs to the OVH SAS network (AS16276) located in Germany. The domain uses Cloudflare nameservers (amir.ns.cloudflare.com and fay.ns.cloudflare.com) but does not present an SSL/TLS certificate, meaning any HTTP communication would be unencrypted. The site’s only visible metadata is the page title "ZIGBET | Enter the world of sport and stakes!", which aligns with the reported scam type of crypto gambling.

A Gridinsoft trust score of 0 out of 100 indicates a complete lack of reputation. VirusTotal analysis shows that one of ninety‑five scanning engines flagged the domain, confirming at least a minimal detection by industry tools. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the assessment of malicious intent. Despite the offline status, the infrastructure details remain relevant: the hosting provider (OVH) is a common platform for malicious actors, and the use of Cloudflare DNS can obscure the true origin of subsequent payloads.

No additional evidence, such as malware samples, phishing page screenshots, or secondary indicators, has been disclosed, leaving the precise attack vector and victim profile uncertain. Defenders should continue to enforce blocking of zigbet.top at perimeter and DNS filtering layers, monitor the associated IP address for any re‑use, and consider adding the IP to internal threat‑intel feeds. Given the lack of TLS, any future resurrection of the site would expose visitors to credential interception. Continuous observation of newly registered domains using the same registrar or nameserver pattern is recommended to pre‑empt similar crypto‑gambling scams.