betaechoapp[.]pages[.]dev

The domain betaechoapp.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently taken offline. DNS resolution points to IP address 172.66.47.46, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented the page title "Suspected phishing site | Cloudflare" and returned an HTTP 403 status code, indicating that access was blocked at the web server level. TLS negotiation used a Google Trust Services / WE1 certificate, confirming that the traffic was encrypted under a legitimate certificate authority.

Infrastructure analysis reveals the deployment of Cloudflare‑provided services, including HSTS and HTTP/3, consistent with the observed technology stack. The domain appears on three independent security blocklists—PhishDestroy, ScamSniffer, and Enkrypt—and VirusTotal records show that seven of ninety‑three scanned security vendors flagged the domain as malicious. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the assessment of high risk. Classified as a generic phishing operation with a crypto gambling lure, the threat level is elevated.

While the page content has not been publicly disclosed beyond the title, the combination of a newly created domain, low reputation scores, blocklist inclusion, and vendor detections provides sufficient evidence for defensive action. Security teams should add betaechoapp.pages.dev to URL filtering and DNS sinkhole policies, block the associated IP address 172.66.47.46, and monitor Cloudflare‑related AS13335 traffic for re‑use. Continuous re‑scanning is advised in case the site reappears or the attackers repurpose the domain, and any future TLS certificates or page titles should be compared against this baseline to detect changes in campaign tactics.