muskbetx[.]cc

Analysis of muskbetx.cc, first observed on February 21 2026, shows a short‑lived domain registered through Web Commerce Communications Limited. The domain resolves to 188.114.97.3, an address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. Both authoritative name servers are dean.ns.cloudflare.com and tiffany.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the host, confirming that HTTPS is not available. The sole page indexed for the domain contains the title “Google Chrome – den schnellen und sicheren Browser von Google jetzt herunterladen”, directly referencing Google’s Chrome product and thereby constituting a brand‑impersonation of Google.

VirusTotal has recorded detections from 15 of 93 scanning engines, reflecting a moderate consensus among security vendors that the site is malicious. The domain is presently listed on one public blocklist and has been added to the PhishDestroy blocklist, confirming that at least one commercial mitigation service has taken action. Current network scans indicate the host is offline, and the domain is marked as taken offline in the intelligence feed. Defenders should add the A‑record (188.114.97.3) and the full domain name to outbound and inbound filtering rules, especially for traffic that targets Google‑related services.

Because the domain leverages Cloudflare’s infrastructure, blocking the IP may affect legitimate Cloudflare traffic; therefore, domain‑level blocking is preferred. Continuous monitoring of the registrar (Web Commerce Communications Limited) for any re‑registration or related sibling domains is advised. Organizations using Google Chrome should ensure that users are educated to verify the URL of any download page and to rely on official Google domains (e.g., google.com) for software acquisition.