8xbet[.]com

The domain 8xbet.com is currently active and hosts a crypto‑gambling phishing operation. Technical checks show the site resolves to IP 104.21.24.166, which is part of AS13335 Cloudflare, Inc. and is located in the United States. An HTTP 200 response is returned and the site presents a valid SSL certificate issued by Google Trust Services (WE1). The page title reads “8Xbet – Trusted Online Betting Brand with Teddy Sheringham & Premier League Partnerships,” indicating a branding effort to lure victims. Infrastructure analysis reveals the use of common front‑end libraries (Bootstrap, jQuery, OWL Carousel) and back‑end services (Mailgun, HSTS, Cloudflare Browser Insights). The domain was registered on 21 February 2026 via GoDaddy.com, LLC, and uses Cloudflare nameservers cecelia.ns.cloudflare.com and cris.ns.cloudflare.com. Reputation data is extremely low, with Scamadviser scoring 1/100 and Gridinsoft 0/100, and the domain appears on two security blocklists. VirusTotal reports five detections out of 93 scanners, confirming malicious activity. The site is associated with the “Gambler Scam” phishing kit and is already blocked by PhishDestroy and CryptoFirewall. MX records point to Google mail servers, suggesting potential email‑based lures. While the observed indicators confirm a high‑risk crypto gambling phishing campaign, the exact payload and victim interaction flow remain unverified. Defenders should immediately block the domain and its resolving IP, monitor for related Cloudflare DNS patterns, and enforce email filtering for messages originating from the listed MX hosts. Continuous tracking of any new detections or changes to the site’s infrastructure is advised.