betax[.]cc

betax.cc is a domain currently under investigation for hosting a crypto drainer phishing operation. The threat involves unauthorized cryptocurrency extraction from unsuspecting users who interact with the site. This domain is classified as active, with mitigation efforts ongoing to contain its reach and impact. PhishDestroy identifies betax.cc as a crypto drainer phishing domain registered through Spaceship, Inc. on March 29, 2026. The domain resolves to IP address 172.67.162.91 and is currently flagged by 2 of 95 VirusTotal vendors, with no detections recorded. Additionally, it is blocked by major security lists OISD and Hagezi, indicating early-stage recognition of its malicious intent. The domain utilizes a Let's Encrypt SSL certificate, which does not imply legitimacy but is commonly leveraged by threat actors to appear trustworthy. With a recent creation date and low detection rates, betax.cc represents an emerging yet unclassified threat in the phishing landscape. As of this report, betax.cc remains an active domain with limited vendor detection. The absence of VirusTotal detections suggests either a newly deployed campaign or evasion tactics to bypass signature-based defenses. Users are strongly advised to avoid interacting with this domain, as it poses a direct risk to cryptocurrency assets. Security teams should monitor for additional infrastructure tied to this domain, particularly new subdomains or IP associations. Immediate action includes blocking the domain and IP at the network level, updating allowlists to exclude betax.cc, and disseminating this advisory to stakeholders. For verification, PhishDestroy users can cross-reference domain intelligence to confirm its malicious status before engagement.