betasus1494[.]com

Analysis of the domain betasus1494.com indicates it is an active generic phishing site with elevated risk, as documented on July 29, 2026. The domain was registered on April 24, 2026, through Fewmoretaps OU, operating under the registrar Trustname.com. Infrastructure analysis reveals the domain uses Cloudflare nameservers (carol.ns.cloudflare.com and odin.ns.cloudflare.com) and resolves to the IP address 94.26.106.217. At the time of reporting, the domain appears on one security blocklist and is actively blocked by PhishDestroy.

VirusTotal scans show that 3 out of 91 security vendors flag this domain as malicious, though the exact nature of the threat—beyond its classification as a generic phishing site—remains unconfirmed due to limited public details on the page content or targeted brand. The registration date suggests the domain was created specifically for malicious purposes, as it lacks a legitimate historical footprint. The use of Cloudflare nameservers is consistent with phishing campaigns seeking to obscure hosting details, though this alone is not definitive proof of malicious intent. The IP address 94.26.106.217 has not been extensively documented in open-source threat intelligence feeds, leaving its broader infrastructure associations unclear.

Defenders should treat this domain as high-risk and consider blocking it at the network level, particularly in environments where gambling or financial transactions occur. Additional monitoring of related domains registered through the same registrar or resolving to the same IP may reveal further malicious activity. The exact content of the site has not been analyzed, so the specific phishing lure or targeted brand remains unknown. Organizations are advised to correlate this domain with internal logs to identify potential exposure or compromise.