betatest112[.]cyou

The domain betatest112.cyoung was registered on May 31, 2026 through Global Domain Group LLC and is currently resolved to the IPv4 address 158.94.211.169. Authoritative name servers for the zone are a.dnspod.com, b.dnspod.com, and c.dnspod.com, indicating use of the DNSPod service. The domain remains active as of the report date (July 15, 2026) and is classified under the generic_phishing threat type. VirusTotal records show that the domain has been scanned by 91 security vendors, with none reporting a detection at the time of analysis; this observation does not constitute a safety or risk assertion. No public web content, page titles, or brand references have been disclosed, so the specific phishing lure employed by the site cannot be confirmed. Infrastructure analysis therefore relies on registration metadata and DNS resolution as the primary indicators of malicious intent. Defenders should consider adding betatest112.cyou and its resolving IP 158.94.211.169 to blocklists, monitor DNS queries for the associated name servers, and continue passive observation for any payload delivery or credential harvesting activity. Further investigation is warranted to capture the landing page content, identify targeted victims, and determine whether the infrastructure is shared with other known malicious domains.