muskbetting[.]com

Domain muskbetting.com has been identified as an active generic phishing host operating under investigation with a risk level flagged as active through seed 10ceb0. This domain does not yet impersonate a specific high-value brand such as Facebook or PayPal but instead leverages a crypto betting theme to deceive users seeking online wagering platforms. The site is currently distributing a cryptocurrency drainer kit designed to siphon digital assets from victims’ wallets without consent. This infrastructure is part of an emerging campaign targeting users searching for decentralized betting opportunities.

This domain was registered on March 10, 2026, through Dynadot Inc, and resolves to IP address 172.67.149.67. It utilizes a Let's Encrypt SSL certificate for added legitimacy. As of this report, VirusTotal shows zero detections across 95 scanning engines, indicating this threat remains undetected by most antivirus solutions. Given its recent creation and clean VT score, it has not yet appeared on major blocklists, including Google Safe Browsing (GSB). The absence of historical phishing or malware associations suggests this is a newly deployed threat actor asset.

PhishDestroy has flagged muskbetting.com as active with an under-investigation status, and immediate response actions are underway to block this domain across user networks. Despite low current detection rates and no prior listings, the recent domain creation and lack of SSL warnings make it a credible immediate threat. Users are strongly advised to avoid visiting this domain and to report any interactions to PhishDestroy for further analysis. Remaining risk is assessed as high due to the combination of recent registration, zero detections, and active deployment of a crypto drainer payload. Proactive blocking of muskbetting.com and its associated IP is recommended to prevent asset loss.