longbet[.]top

Analysis of longbet.top reflects a recent crypto‑focused phishing campaign that was taken offline shortly after detection. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare edge address 104.21.85.241, associated with ASN 13335, a US‑based hosting provider. No TLS certificate is presented, indicating the site was served over plain HTTP or an invalid HTTPS configuration, which is atypical for a site purporting to handle cryptocurrency transactions. The observed page title, "Longbet: Elon Musk’s Official Crypto Casino Powered by Blockchain," directly targets the Elon Musk brand and suggests a crypto casino narrative, aligning with the classified scam type of a crypto scam.

Network fingerprints reveal the use of Cloudflare’s DNS services (gemma.ns.cloudflare.com, uriah.ns.cloudflare.com) and the inclusion of third‑party tracking identifiers such as Twitter Ads and a Facebook Pixel, both of which are commonly employed to harvest analytics and augment malicious monetisation. The site was listed on a single security blocklist and is currently blocked by the PhishDestroy service. VirusTotal analysis records 13 out of 93 scanning engines flagging the domain, reinforcing the malicious assessment.

While the site’s content has not been captured in full, the combination of registrar data, IP hosting, absence of SSL, the misleading page title, and the detection signatures provide sufficient confidence for defenders to treat longbet.top as a high‑confidence crypto phishing indicator. Organizations should add the domain to internal deny lists, monitor for any residual sub‑domains or CNAMEs pointing to the same Cloudflare IP range, and review outbound traffic for connections to the identified IP. Threat intelligence feeds should be updated to reflect the domain’s removal from active service while preserving its historical indicators for attribution and broader campaign tracking.