bet-cashdrift[.]club

Bet-Cashdrift.club is an active high‑risk phishing domain created on April 15, 2026 and registered through Dynadot Inc. The zone is delegated to sierra.ns.cloudflare.com and aiden.ns.cloudflare.com, indicating use of Cloudflare DNS. Resolution returns the IP address 188.114.97.3, which is owned by CloudFlare, Inc. and geolocated to Canada. HTTP requests receive a 302 redirect, and the site presents a TLS certificate from Let’s Encrypt (certificate identifier E8). The page title observed is "Document"; no further content has been disclosed. The domain appears on a single security blocklist and is listed by PhishDestroy. VirusTotal reports four of ninety‑four scanners flagging the domain, and AlienVault OTX references it in one threat‑intel pulse. Gridinsoft assigns a trust score of zero out of one hundred, underscoring its malicious nature. Given the limited public artefacts, the precise phishing campaign details remain unknown, but the infrastructure signals a typical credential‑harvesting operation. Defenders should immediately block DNS resolution and HTTP traffic to bet-cashdrift.club and its resolved IP, enforce network‑level filtering for Cloudflare‑hosted addresses associated with the domain, and monitor for any related indicators of compromise in internal logs. Continuous re‑evaluation is advised as additional intelligence may emerge.