gambleon[.]bet
“GAMBLEON | Play at the best online casino based on Blockchain”
gambleon.bet — 内容不可用. 品牌冒充:Cryptoscam; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 7/93 (alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. 注册商: NameCheap.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
On 23 July 2026, the domain gambleon.bet was identified as part of a crypto‑scam infrastructure that presents itself as an online casino built on blockchain technology. The domain was registered on 15 May 2025 through NameCheap, Inc. and resolves to the IPv4 address 69.5.189.56, which is announced by AS42624 (Global‑Data System IT Corporation) and geolocated to Switzerland. The authoritative nameservers listed are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub.com. No TLS certificate is present; the site is reachable only over HTTP and its current HTTP status is offline, indicating that the operator has taken the site down.
Scamadviser assigns a trust score of 1 out of 100, reflecting extreme risk. VirusTotal has recorded 7 detections out of 93 scanning engines, confirming malicious classification. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. The page title retrieved during the brief live scan reads “GAMBLEON | Play at the best online casino based on Blockchain”, which aligns with the reported scam type of a crypto‑based gambling fraud.
The infrastructure is linked to the publicly known “Gambler Scam” phishing kit, suggesting reuse of known malicious templates. While the exact content and user‑interaction flow have not been captured, the available artifacts demonstrate a coordinated attempt to lure victims into cryptocurrency gambling scams. Defenders should add gambleon.bet and its resolving IP 69.5.189.56 to network‑level deny lists, monitor for any resurgence of the domain or similar registrations, and incorporate the observed kit characteristics into detection rules. Continuous observation of NameCheap‑registered domains using the same nameserver set is recommended, as the configuration pattern may be reused in future campaigns.
安全信号
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal 分析
证据与外部报告
PD-20260105-841459 Recipient: abuse@globaldata-cloud.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。