betnano-agiris[.]icu

This domain is flagged under investigation for hosting cryptocurrency wallet phishing infrastructure. Analysis indicates it is designed to mimic legitimate wallet services, targeting users with fraudulent credential harvesting pages. The specific threat type involves the theft of private keys, seed phrases, or login credentials for cryptocurrency wallets, potentially leading to unauthorized asset transfers. Infrastructure analysis reveals the following technical indicators: the domain betnano-agiris.icu was registered on June 20, 2026, through Fewmoretaps OU d/b/a Trustname.com. It currently resolves to the IP address 188.114.97.3 and remains active without detection on blocklists or security engines, as evidenced by a 0/95 detection rate on VirusTotal. The SSL certificate is issued by Google Trust Services, which may lend an appearance of legitimacy. No prior listings on threat intelligence feeds or abuse databases have been identified as of this assessment. Mitigation steps for this threat type include immediate blocking of the domain and associated IP at the network perimeter. Organizations should deploy endpoint protection rules to detect and prevent access to the domain, particularly on systems handling cryptocurrency transactions. Users should be educated to verify domain authenticity before entering wallet credentials, with emphasis on checking for subtle misspellings or unusual top-level domains. Security teams are advised to monitor for outbound connections to 188.114.97.3 and correlate logs for potential credential exposure. Given the domain's recent registration and lack of prior detections, proactive hunting for related infrastructure is recommended to identify additional phishing assets.