betnix[.]fun
“Google Chrome - The Fast & Secure Web Browser Built to be Yours”
Evidence Summary
The domain betnix.fun was created on July 8, 2026, and is currently active. It has been identified as a high-risk generic phishing site and is flagged on one security blocklist, specifically blocked by PhishDestroy. Analysis indicates that the domain resolves to the IP address 172.67.156.137, which may require further investigation for potential ties to other malicious activities.
The domain's registration is handled by Web Commerce Communications Limited dba WebNic.cc, a registrar that may be scrutinized for its role in hosting potentially harmful domains. The nameservers associated with this domain are alexis.ns.cloudflare.com and crystal.ns.cloudflare.com, which are indicative of Cloudflare's infrastructure. A review of the domain on VirusTotal shows that 2 out of 91 security vendors have flagged it as malicious, signaling a need for caution.
Given its classification as a phishing domain, defenders should prioritize monitoring network traffic for any attempts to communicate with this domain. Additionally, organizations should consider implementing measures to block access to the domain and educate users on the risks associated with phishing schemes. As the domain is still active, continuous monitoring and reevaluation of its threat status are advised.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260724-F7C85F- PDF artifact
- PDF evidence
Legal basis
Full evidence text
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
10 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive