xjembet[.]com
“Xjembet: Most Popular Online Crypto Casino Based on Blockchain”
xjembet.com — 内容不可用 (HTTP 502). 品牌冒充:Google Tag Manager; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. 注册商: MAT BAO.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of xjembet.com indicates a fraudulent domain impersonating Google Tag Manager, classified as a crypto casino scam. The domain, registered on December 7, 2025, through MAT BAO CORPORATION, is currently offline but was previously hosted on Cloudflare infrastructure (AS13335) at IP 172.67.178.71, located in the US. No SSL certificate was detected, increasing the risk of unencrypted data interception. The page title, 'Xjembet: Most Popular Online Crypto Casino Based on Blockchain,' directly contradicts the claimed association with Google Tag Manager, revealing its true purpose as a gambling-themed scam.
Security vendors have flagged the domain, with 13 of 95 engines on VirusTotal identifying it as malicious. It appears on one security blocklist and is recognized in a single AlienVault OTX threat intelligence pulse, further confirming its malicious classification. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk status. The domain was blocked by PhishDestroy and is linked to the 'Gambler Scam' phishing kit, a known framework for crypto-related fraud.
Infrastructure analysis reveals Cloudflare nameservers (ivy.ns.cloudflare.com and troy.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. While the domain is currently offline, defenders should treat it as an active threat vector due to its recent registration and persistent detection by security tools. Organizations are advised to block the domain at the DNS level, monitor for related indicators of compromise (IOCs), and alert users to the risks of crypto gambling scams. The absence of SSL and the use of Cloudflare hosting are consistent with phishing infrastructure, warranting continued vigilance even after takedown.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal 分析
证据与外部报告
“he website xjembet.com induced cryptocurrency transfers by falsely claiming that deposits were required for AML/KYC verification and withdrawal activation. After each payment, new undisclosed requirements were introduced, including wallet verification and VIP status deposits. The operator justified these demands by referencing non-existent FATF/AML rules. Withdrawals remain blocked unless further payments are made. This matches known withdrawal-lock scam patterns.”
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。