snoopdbet[.]com

Analysis of snoopdbet.com shows a high‑risk, active phishing operation targeting users interested in crypto gambling. The site presents the page title "Snoopdbet: Donald Trump’s Leading Blockchain Crypto Casino," implying an illegitimate affiliation with a public figure to lend credibility. Infrastructure data reveal registration on March 09, 2026 through TUCOWS.COM, CO., and DNS resolution via Cloudflare nameservers (mitchell.ns.cloudflare.com, treasure.ns.cloudflare.com) to IP 172.67.163.90, which belongs to AS13335 Cloudflare, Inc., located in the United States. The site serves content over HTTPS with a Let’s Encrypt/E7 certificate and returns HTTP 200, indicating a fully functional web server. Threat intelligence flags the domain as blocked by PhishDestroy and identifies the deployment of a known "Gambler Scam" phishing kit, aligning with the gambling narrative in the page title. Reputation metrics are extremely low, with Gridinsoft assigning a trust score of 1 out of 100, and VirusTotal reporting 16 of 91 security vendors flagging the domain as malicious. The domain appears on at least one security blocklist, confirming its inclusion in active mitigation lists. Uncertainty remains regarding the exact content hosted on the landing page, as no visual analysis is available, and the extent of user credential harvesting is not disclosed. Defenders should continue to block the domain at network perimeters, update URL filtering and DNS sinkhole rules, and monitor for any related C2 infrastructure tied to the Cloudflare IP range. Incident response teams should also advise users to avoid any unsolicited invitations to crypto casino platforms that reference high‑profile individuals, and to report attempted credential submissions to appropriate security channels.