necobet[.]com

Analysis of necobet.com confirms its classification as a crypto casino scam site, targeting users with fraudulent blockchain-based gambling services. The domain was registered on October 16, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals Cloudflare hosting (AS13335) on IP 188.114.97.3, a common obfuscation tactic to mask the true origin of malicious sites. The domain currently resolves to a Cloudflare IP located in the US, though this may reflect proxy services rather than the actual hosting environment. No SSL certificate is present, increasing the likelihood of interception or tampering during user interactions.

The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. VirusTotal reports 11 detections from 95 security vendors, indicating moderate consensus on its malicious nature. The page title, 'Necobet: Most Popular Online Crypto Casino Based on Blockchain,' aligns with the identified 'Gambler Scam' phishing kit, which typically lures victims with promises of high-return crypto gambling. Gridinsoft assigns a trust score of 1/100, reinforcing the domain's high-risk status.

While the site is currently offline, defenders should treat any future resolution or reappearance as a potential threat. Recommended actions include maintaining blocklist entries, monitoring for DNS changes, and alerting users to the risks of crypto-based gambling scams. The absence of SSL and reliance on Cloudflare nameservers (leo.ns.cloudflare.com, raphaela.ns.cloudflare.com) further suggest a lack of legitimate operational intent. No concrete evidence links this domain to specific threat actors, but its infrastructure and scam type are consistent with opportunistic fraud campaigns.