gg-bet[.]rest

The domain gg-bet.rest was registered on December 13, 2025 through Global Domain Group LLC and is currently active. It resolves to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents the page title "Gg-bet: Most Popular Online Crypto Casino Based on Blockchain," indicating a crypto‑casino lure that aligns with the identified scam type of a Crypto Scam. Technical analysis shows the site is served over TLS with a certificate issued by Google Trust Services under the WE1 profile, a common configuration for Cloudflare‑protected sites. Nameservers are ligia.ns.cloudflare.com and syeef.ns.cloudflare.com, confirming Cloudflare as the DNS provider.

HTTP response code is 200, meaning the page is delivering content to visitors. The infrastructure has been flagged by several security controls: it appears on one public blocklist, is blocked by PhishDestroy, and received a Gridinsoft trust score of 0 out of 100. VirusTotal analysis reports that 16 of 93 scanned security vendors flagged the domain as malicious, providing independent confirmation of its threat nature. The site is associated with the publicly known "Gambler Scam" phishing kit, which is frequently used to harvest credentials and monetize victims through fraudulent gambling services.

Defenders should immediately add gg-bet.rest to URL filtering and DNS block lists, and consider blocking the associated IP 188.114.96.3, especially for users accessing financial or cryptocurrency services. Monitoring for additional domains that resolve to the same Cloudflare nameservers or share the same registrar may reveal further campaign expansion. Continuous ingestion of threat feeds that reference the Gambler Scam kit and the observed detection signatures will improve detection velocity.