# bet420.cc — MALICIOUS

> PhishDestroy identifies bet420.cc as a live crypto drainer impersonating betting brands. 24/95 VirusTotal vendors flag this domain. Block immediately.

## Summary
Domain bet420.cc has been classified as an active crypto-drainer phishing host designed to siphon cryptocurrency from victims who interact with its counterfeit betting interface. The campaign masquerades as legitimate sportsbook services to harvest private keys or authorize malicious token transfers. Open-source telemetry suggests the kit targets Ethereum and Solana wallets under the guise of bonus claims or payout confirmations.  This domain resolves to IP 122.10.42.217 and was registered on January 26, 2026 through GoDaddy.com, LLC. SSL encryption is provided by a Let’s Encrypt certificate, indicating an attempt to appear legitimate. VirusTotal analysis shows 24 out of 95 security engines currently flag the URL, while domain age and certificate choice reflect standard early-stage attacker tradecraft. The low VT coverage combined with high-risk behavior results in an elevated risk classification. Current threat intelligence lists bet420.cc on 3 blocklists, confirming widespread suspicion but not yet universal containment.  Risk remains ACTIVE; the drainer remains live and accessible. Immediate network blocks at the proxy, DNS and firewall layers are advised to prevent wallet compromise. Users should treat any “bet420.cc” URL as hostile, avoid wallet connection prompts and verify sportsbook URLs via official channels only. Continuous monitoring for new IP shifts and certificate renewals is required until take-down is confirmed.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-26 00:46:46
- Registrar: GoDaddy.com, LLC
- IP: 122.10.42.217

## Detection Status
- VirusTotal: 24 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bc78adb8-6acd-4d28-8e01-3efb085dc509
- PhishDestroy: https://phishdestroy.io/domain/bet420.cc/
- LLM endpoint: https://phishdestroy.io/domain/bet420.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bet420.cc/
Last updated: 2026-03-22