bet30winar[.]com

The domain bet30winar.com was registered on May 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the Cloudflare address 104.21.80.114, a location associated with Cloudflare, Inc. in Canada. The authoritative nameservers agustin.ns.cloudflare.com and mary.ns.cloudflare.com confirm the use of Cloudflare’s CDN for traffic handling. A Google Trust Services WE1 SSL certificate is present, indicating a valid TLS handshake despite the malicious purpose.

A live web page responds with HTTP status 200 and displays the title "Bet30 Argentina — apuestas deportivas y casino online," mimicking a legitimate sports betting and casino service. The page content aligns with the publicly identified "Gambler Scam" phishing kit, which is commonly employed to harvest credentials for gambling platforms. The site’s risk level is classified as high and its status remains active as of the report date.

Open source intelligence shows the domain appearing in a single AlienVault OTX pulse and on one security blocklist. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records a single detection out of 95 scanned engines, indicating limited but existing anti‑malware awareness. The domain has been actively blocked by PhishDestroy, demonstrating that at least one remediation service has taken action against it.

Defenders should block bet30winar.com at the DNS and proxy layers, monitor outbound traffic for connections to its IP address, and inspect TLS fingerprints matching the Google Trust Services WE1 certificate for anomalous use. Email security gateways should be updated to flag messages referencing the Bet30 brand or containing links to the domain. Continuous monitoring of Cloudflare‑originated IPs for similar patterns is advised, as the infrastructure could be leveraged for additional phishing campaigns.