muskbet[.]cfd

muskbet.cfd is currently active and has been classified as a generic phishing site. The domain was registered on May 15 2026 through Global Domain Group LLC and points to the IP address 172.67.209.254. Both authoritative name servers, beau.ns.cloudflare.com and leah.ns.cloudflare.com, belong to Cloudflare, indicating that the site is hosted behind Cloudflare’s edge network. The short registration window and the use of Cloudflare are common among abuse infrastructure, allowing rapid deployment and obscuring the true origin server.

Detection signals show that the domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal reports three positive detections out of 91 scanned scanners, confirming that at least a subset of security engines have identified malicious behavior associated with the domain. The limited number of vendor flags suggests that the phishing campaign may be newly active or employing techniques that evade broader detection.

Given the available evidence, defenders should treat muskbet.cfd as high‑risk. Recommended actions include adding the domain to DNS‑and URL‑filtering policies, monitoring outbound connections to 172.67.209.254, and watching for other domains created by the same registrar that resolve to Cloudflare edge IPs. Continuous re‑evaluation is advised, as additional detections or threat‑intel feeds may surface further indicators of compromise.