betoffice-girisadrres[.]com
“Betoffice | Güncel Giriş Adresi ve Modern Bahis Platformu”
betoffice-girisadrres.com — Non vérifié. Usurpation de l'identité de la marque : Google; Type d'arnaque : Generic Phishing. Résumé des preuves: VirusTotal 6/95 (alphaMountain.ai, CyRadar, Fortinet, Gridinsoft, Seclookup); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 72/100. Bureau d’enregistrement: NiceNIC.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain betoffice-girisadrres.com was registered on February 22, 2026 through NiceNIC International Group Co., Limited and is presently taken offline. Infrastructure analysis shows that the domain resolves to the IP address 188.114.97.3, which is hosted within the United States under ASN 13335, a Cloudflare network. The authoritative nameservers are jaime.ns.cloudflare.com and zara.ns.cloudflare.com, confirming the use of Cloudflare's DNS services. No SSL certificate is presented for the site, indicating that any traffic to the domain would have occurred over unencrypted HTTP, a common characteristic of low‑cost phishing deployments.
The page title retrieved prior to takedown reads "Betoffice | Güncel Giriş Adresi ve Modern Bahis Platformu," explicitly referencing the Betoffice betting platform and suggesting an attempt to lure users seeking a login address for that service. VirusTotal analysis recorded six positive detections out of ninety‑five scanned engines, providing modest but notable corroboration of malicious intent. The domain is listed on a single public blocklist and has been flagged by the PhishDestroy sinkhole, reinforcing its classification as a phishing‑related resource.
Because the site is no longer reachable, dynamic content and payload details remain unknown, and any login form or credential‑harvesting mechanisms cannot be verified at this time. Defenders should continue to monitor the associated IP address for any re‑use, enforce outbound traffic filtering to block connections to 188.114.97.3, and add the domain to internal blocklists. Additionally, security teams should propagate the indicator set—including the domain, IP, and nameserver information—to threat‑intel sharing platforms to aid in early detection of potential replicas or related campaigns targeting the Betoffice brand.
Renseignements sur la sécurité réseau Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | betoffice-girisadrres.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-17 02:53:53 UTC
Casino / Gambling License Verification
Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
PD-20260222-C7DEB1 Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif