casbetex[.]com

The domain casbetex.com was registered on August 20, 2025 through NameCheap, Inc. and is currently hosted behind Cloudflare (AS13335) with the A record 104.21.51.162 located in the United States. The site presents a page title that advertises a blockchain‑based online casino, which matches the classified scam type of a crypto gambling operation. Analysis of the infrastructure shows that the domain uses Cloudflare nameservers (carmelo.ns.cloudflare.com, elma.ns.cloudflare.com) and does not present an SSL certificate, indicating the site was served over plain HTTP before it was taken offline. Reputation services assign a Gridinsoft score of 0/100 and a Scamadviser score of 1/100, both indicating extreme distrust.

VirusTotal reports that 2 of 95 scanning engines flagged the domain, confirming malicious intent, while the domain appears on a single security blocklist and has been actively blocked by PhishDestroy. AlienVault OTX references the domain in one threat‑intelligence pulse, providing additional corroboration of its malicious use. The phishing kit identified as “Gambler Scam” suggests the site attempted to lure victims into depositing cryptocurrency or personal information under the pretense of gambling. Because the site is presently offline, content cannot be verified, and the lack of SSL prevents any further TLS‑based fingerprinting.

Defenders should immediately add casbetex.com to URL filtering and DNS block lists, monitor the associated IP address 104.21.51.162 for any revival of services, and enforce outbound traffic controls to prevent connections to Cloudflare‑proxied endpoints that were recently associated with this domain. Continuous watch on newly registered domains using NameCheap and targeting blockchain‑related casino terminology is advised, as the attacker may reuse the same infrastructure or kit. Updating endpoint security signatures with the two VirusTotal detections and the OTX pulse identifier will improve detection of related payloads.