detskiisadik[.]bet

The domain detskiisadik.bet was registered on February 21, 2026 and is presently classified as a generic phishing site with a crypto‑scam focus. The page title observed during the scan reads "Detskiisadik: Elon Musk’s Official Crypto Casino Powered by Blockchain," which suggests an attempt to exploit the public figure Elon Musk to lure victims into a cryptocurrency gambling scheme. Technical analysis shows the domain resolves to the IP address 104.21.1.195, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. The authoritative nameservers are coco.ns.cloudflare.com and west.ns.cloudflare.com, indicating the use of Cloudflare’s DNS services.

No SSL certificate was presented, meaning the site operated over plain HTTP, which is typical of low‑effort phishing deployments. The site employed the publicly known "Gambler Scam" phishing kit, consistent with the crypto‑casino narrative in the page title. VirusTotal recorded 12 detections out of 93 security vendors, confirming that multiple commercial scanners identified malicious behavior. The domain has been added to a single security blocklist and was specifically blocked by the PhishDestroy service.

Current operational status is offline as of the report date, July 23, 2026, and the risk level is elevated. Defenders should ensure that the domain and its associated IP are added to network‑level deny lists, monitor for any re‑registration or similar domains using the same Cloudflare nameservers, and consider employing URL filtering that flags the observed page title pattern. Continuous re‑evaluation is advised in case the infrastructure re‑appears or the kit is repurposed for new campaigns.