lebulll-pt[.]com

Analysis of lebulll-pt.com shows an active generic phishing infrastructure targeting the LeBull Casino brand. The domain was registered on June 16, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to IP 209.74.82.247, which is located in Singapore and belongs to AS22612 (Namecheap, Inc.). DNS is served by a.dnspod.com, b.dnspod.com and c.dnspod.com. The site presents a valid SSL certificate from Let’s Encrypt (YE1) and is hosted on an Nginx server, returning HTTP 200. The page title "LeBull Casino Portugal – Guia Informativo Completo" indicates a brand impersonation attempt, and the underlying code has been identified as the Gambler Scam phishing kit. VirusTotal reports three of ninety-one scanning engines flagging the domain, and it is listed on three public blocklists, including PhishDestroy, MetaMask and SEAL. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious classification. While the exact content of the site has not been captured, the presence of a known gambling‑related phishing kit and the high‑risk rating suggest credential harvesting or financial fraud. Defenders should block lebulll-pt.com at DNS and proxy layers, deny traffic to 209.74.82.247, and add the domain and IP to internal and external threat blocklists. Continuous monitoring of DNS queries for this domain and related subdomains is advised, as well as user awareness training focused on LeBull Casino communications to reduce the likelihood of successful credential capture.