richiobet[.]com

The domain richiobet.com was registered on September 22, 2025 through Web Commerce Communications Limited. Its authoritative name servers are deborah.ns.cloudflare.com and sri.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. DNS resolution points to IP address 104.21.18.150, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. No TLS certificate is observed for the host, confirming that the site is served without HTTPS protection. The site’s HTML title reads “Richiobet: Most Popular Online Crypto Casino Based on Blockchain”, matching the declared scam type of a crypto‑focused gambling scheme.

Analysis of the hosting environment shows the domain is currently offline, consistent with the “taken offline” status reported in the intelligence feed. VirusTotal has recorded 14 detections out of 95 scanning engines, and the domain appears on a single security blocklist that is managed by PhishDestroy. The Gridinsoft trust score is 1 out of 100, reflecting an extremely low reputation. The phishing kit attributed to the campaign is identified as “Gambler Scam”, which is commonly used to lure victims into fraudulent cryptocurrency gambling operations.

Publicly available evidence does not include a valid SSL certificate, and the HTTP response code has not been captured because the service is offline. Consequently, the exact content of the landing page cannot be verified, and the presence of additional malicious payloads beyond the identified kit remains unknown. Defenders should continue to block richiobet.com at DNS and network layers, add the address 104.21.18.150 to egress filtering lists, and monitor for any future re‑registration of the domain or similar domains that use the same registrar or Cloudflare name servers.