ilonmusk[.]sbs

This domain, ilonmusk.sbs, was registered through Dynadot LLC on August 30, 2025 and is currently taken offline. DNS resolution points to the Cloudflare address 172.67.141.168, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are drake.ns.cloudflare.com and faye.ns.cloudflare.com. No TLS certificate is presented, indicating that the site operated without HTTPS protection. The page title returned from the host reads “Ilonmusk: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the observed “Gambler Scam” phishing kit and the classification of a crypto‑based scam.

Threat intelligence shows that fifteen of ninety‑three VirusTotal scanners flagged the domain as malicious, and the site appears on a single security blocklist. It has been actively blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. The overall risk level is elevated. Defenders should add ilonmusk.sbs to outbound and inbound deny lists across firewalls, DNS filtering, and proxy solutions.

Monitoring of the associated Cloudflare IP (172.67.141.168) is advised, as the same address may host additional malicious payloads. Given the lack of TLS, any attempt to retrieve content over HTTP can be intercepted for further analysis. Analysts should also watch for other domains registered with Dynadot that resolve to the same nameservers or IP range, as the infrastructure may be reused for future campaigns. Continuous updates from blocklist providers, such as PhishDestroy, and periodic re‑scans on VirusTotal are recommended to capture any changes in the domain’s status.