willsonbet[.]com

Analysis of willsonbet.com confirms its classification as a crypto casino scam domain, currently offline but previously active in fraudulent operations. The domain was registered on October 8, 2025, through NameCheap, Inc., a registrar frequently associated with phishing and scam infrastructure. Infrastructure analysis reveals Cloudflare hosting (AS13335), with nameservers margot.ns.cloudflare.com and mustafa.ns.cloudflare.com, and resolution to IP 188.114.96.3, located in the United States. No SSL certificate was detected, increasing the risk of unencrypted data interception.

The page title, 'Willsonbet: Most Popular Online Crypto Casino Based on Blockchain,' directly indicates the scam type, aligning with the identified 'Gambler Scam' phishing kit. Detection metrics support this assessment: the domain appears on one security blocklist (PhishDestroy) and is flagged by 11 of 95 security vendors on VirusTotal. AlienVault OTX includes it in one threat intelligence pulse, further corroborating malicious activity. Gridinsoft assigns a trust score of 1/100, reflecting high confidence in its fraudulent nature.

While the domain is currently offline, defenders should treat it as a confirmed threat. Historical resolution to Cloudflare IP 188.114.96.3 and the use of a known phishing kit warrant inclusion in blocklists and monitoring for reactivation. The absence of SSL and low detection coverage (11/95) suggest the campaign may have been targeted or recently launched, limiting broader visibility. Organizations should verify internal logs for connections to 188.114.96.3 or the domain itself and update detection rules to account for the 'Gambler Scam' kit pattern.