betlikepartner[.]icu

PhishDestroy identifies betlikepartner.icu as a domain hosting an active crypto drainer phishing campaign as of April 2026. The threat is currently under investigation by security vendors, with no detections recorded but live infrastructure hosting malicious activity. This domain poses a high risk to unsuspecting cryptocurrency users due to its deceptive design and operational status.

This domain was flagged by 7 of 95 VirusTotal vendors, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 188.114.97.3. The domain was created on April 01, 2026, and operates with a valid Let's Encrypt SSL certificate. The low detection rate suggests either recent deployment or evasion techniques, warranting immediate scrutiny by threat intelligence teams.

The domain remains active, with no evidence of takedown or blocklisting as of investigation. Technical indicators include the IP address, registrar, and SSL certificate issuer, all of which are typical in phishing operations aiming to evade detection. Concrete recommendations include blocking the domain and IP at the network level, monitoring for associated threat indicators, and deploying user awareness campaigns to prevent interactions. Due to the high-risk nature of crypto drainer campaigns, immediate action is advised to mitigate potential financial losses.