sarubet[.]com

Analysis as of July 25, 2026 indicates that the domain sarubet.com is presently taken offline. The domain was registered on February 27, 2026 through NiceNIC International Group Co., Limited and resolves to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. (AS13335) in the United States. The authoritative nameservers are jose.ns.cloudflare.com and sima.ns.cloudflare.com, and the site does not present an SSL certificate, leaving the transport layer unencrypted. The page title returned by the site, “Sarubet: Most Popular Online Crypto Casino Based on Blockchain,” aligns with the listed scam type of a crypto‑related scam.

Intelligence sources identify the underlying phishing kit as the Gambler Scam, a known template used to lure victims into fraudulent cryptocurrency gambling operations. VirusTotal scans show that four out of ninety‑three security vendors flagged the domain, confirming malicious activity despite a relatively low detection count. The domain appears on one external security blocklist and is actively blocked by the PhishDestroy service, reflecting community consensus of its threat nature. The elevated risk rating is consistent with the combination of a recent registration, lack of TLS, association with a gambling‑focused phishing kit, and confirmed detections.

Uncertainty remains regarding the current content of the site, as it is offline and no additional payload details have been observed. Defenders should continue to block the domain at perimeter defenses, add the associated IP address to deny‑list rules, and monitor for any future re‑hosting attempts under the same registrar or nameserver configuration. Ongoing observation of the IP range owned by Cloudflare for similar phishing kits is advised, and any new detections should be correlated with the Gambler Scam fingerprint to accelerate response.