hopx[.]bet

The domain hopx.bet was registered on February 21 2026 via PDR Ltd. d/b/a PublicDomainRegistry.com. The site resolves to 104.21.55.49, an address owned by Cloudflare (AS13335) located in the United States. The authoritative nameservers are hera.ns.cloudflare.com and kyrie.ns.cloudflare.com, indicating the use of Cloudflare's DNS and CDN services. No TLS certificate is presented; HTTP connections are unencrypted, which is consistent with many low‑cost phishing kits. The page title returned from the live capture reads “Hopx: Most Popular Online Crypto Casino Based on Blockchain,” confirming a crypto‑casino theme.

The threat classification in the intelligence set lists the campaign as a crypto scam employing a Gambler Scam kit. Gridinsoft assigned a trust score of 0/100, and the domain appears on a single security blocklist. PhishDestroy has already taken the domain offline, and the current status is listed as offline. VirusTotal analysis shows that 14 of 93 scanning engines flagged the domain, reinforcing the malicious assessment. AlienVault OTX contains the domain in one pulse, providing additional community context.

The lack of an SSL certificate, combined with the low trust score and multiple vendor detections, suggests an opportunistic phishing operation targeting cryptocurrency users. However, the limited number of blocklist entries and the recent registration date mean that longitudinal activity data are sparse, and the full scope of victim harvesting is unclear. Defenders should add hopx.bet to URL filtering and domain‑reputation lists, block both the domain and its resolved IP 104.21.55.49 at perimeter and endpoint layers, and monitor for any similar Cloudflare‑hosted crypto‑casino impersonations. Incident response teams should treat any credential or wallet information submitted to this site as compromised, enforce credential rotation, and consider notifying affected users.