betwise[.]top

On 23 July 2026 the domain betwise.top was observed serving a page titled "Betwise: Elon Musk’s Official Crypto Casino Powered by Blockchain". The site was registered on 21 February 2026 and subsequently resolved to the IP address 104.21.72.207, which belongs to Cloudflare, Inc. (AS13335) located in the United States. The SSL certificate presented as "WE1". The page has been classified as a crypto‑scam using the publicly known Gambler Scam kit.

Defensive feeds have listed the domain on the PhishDestroy blocklist and on a single additional security blocklist. The domain earned a zero‑point trust rating from Gridinsoft (0/100). VirusTotal scans show that 13 of 93 antivirus engines flagged the domain as malicious. The current operational status is offline, indicating that the malicious content has been taken down or the hosting has been terminated.

Analysts note that the combination of a Cloudflare front‑end, a low trust score, and the presence of a known gambling‑related phishing kit are consistent with prior crypto‑casino fraud campaigns that exploit high‑profile names such as Elon Musk to lure victims. Defenders should continue to block the domain at DNS and proxy layers, monitor the associated IP address for any future repurposing, and add the observed SSL fingerprint to certificate pinning lists where feasible. Additional vigilance is advised for any new domains that resolve to the same Cloudflare edge IP range and present similar page titles or kit signatures, as threat actors often recycle infrastructure across campaigns. The limited detection footprint – a single blocklist entry and modest VirusTotal hits – suggests that the campaign may have been short‑lived, but the use of a reputable CDN underscores the need for rapid detection and takedown in future incidents.