bitsplay[.]bet

On July 25, 2026 the domain bitsplay.bet was observed hosting a fraudulent offering that presents itself as a crypto‑based online casino, as indicated by the page title "Bitsplay: Most Popular Online Crypto Casino Based on Blockchain". Registration details show the domain was provisioned through Cloudflare, Inc., and its authoritative nameservers are surina.ns.cloudflare.com and vicente.ns.cloudflare.com. DNS resolution points to the IP address 172.67.145.140, which belongs to AS13335, a Cloudflare network located in the United States. No SSL certificate was detected for the site, meaning traffic was likely served over plain HTTP, a common characteristic of hastily deployed phishing infrastructure.

The page was identified as employing a "Gambler Scam" phishing kit, aligning with the declared crypto casino theme. Reputation services provide mixed signals: Gridinsoft assigns a trust score of 0 / 100, while Scamadviser rates the domain at 46 / 100, reflecting limited confidence in its legitimacy. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy, indicating that at least one defensive provider has taken mitigation action. A VirusTotal analysis involving 95 scanning engines reported no detections, but the lack of alerts does not constitute evidence of safety.

The site’s current operational state is offline, and the risk level remains under investigation. Defenders encountering traffic to bitsplay.bet should continue to block the domain, monitor for any re‑hosting attempts, and consider adding the IP address 172.67.145.140 to network‑level deny lists. Ongoing observation of Cloudflare‑hosted infrastructure is advised, as the attacker may shift to alternative IPs within the same AS.