watoxe[.]bet

The domain watoxe.bet was registered on February 21 2026 and is currently listed as offline. Automated analysis shows the domain resolves to the IPv4 address 57.129.97.29, which belongs to the OVH SAS network (AS16276) located in Germany. The hosting provider is therefore OVH, a common infrastructure source for malicious campaigns. The site presented the page title “WATOXE | Enter the world of sport and stakes!” and was identified as a brand‑impersonation campaign targeting the “blast” brand.

The SSL certificate presented is identified as type E5, indicating a self‑signed or low‑trust certificate. Reputation services have assigned a Gridinsoft trust score of 0 / 100, and the domain appears on a single security blocklist. PhishDestroy has taken the domain offline, and VirusTotal reports that one of ninety‑three scanning engines flagged the domain as malicious. The limited detection footprint suggests the campaign saw brief activity before takedown.

Defenders should update perimeter controls to block the IP 57.129.97.29 and add watoxe.bet to URL filtering lists. Continuous monitoring of the OVH ASN for similar newly registered domains is advised, as attackers frequently reuse this provider. Because the site is already offline, immediate response may focus on preventing re‑use of the same brand‑impersonation templates in future operations.