Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 5 outgoing records; the latest is dated . The recorded recipient is abuse@nic.io.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
betova[.]io
“Betova: Most Popular Online Crypto Casino Based on Blockchain”
betova.io — 未検証. ブランドの偽装: Genericcrypto; 詐欺タイプ: Crypto Scam. 証拠の概要: VirusTotal 16/94 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Fortinet); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. レジストラ: NiceNIC.
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
Analysis of the domain betova.io indicates it was operating as a fraudulent online crypto casino, as evidenced by its page title 'Betova: Most Popular Online Crypto Casino Based on Blockchain.' The domain was registered on March 7, 2026, through NiceNIC International Group Co., Limited, and is currently offline with an HTTP 403 status. Infrastructure analysis reveals it was hosted behind Cloudflare (AS13335) with nameservers jamie.ns.cloudflare.com and martin.ns.cloudflare.com, resolving to the IPv6 address 2606:4700:3032::6815:2ec4. The SSL certificate was issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious sites. Sixteen of 94 security vendors on VirusTotal flagged the domain, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL.
The domain was classified as a 'Gambler Scam' phishing kit, targeting users with promises of blockchain-based gambling. Detected technologies include Twitter Ads and Facebook Pixel, suggesting the campaign may have leveraged social media for distribution. While the exact content and mechanics of the scam are not fully analyzed, the combination of crypto-themed branding, Cloudflare hosting, and detection by multiple security vendors supports its classification as high-risk.
Defenders should treat this domain as malicious and block it at the network level. Given its association with a known phishing kit and crypto scam classification, organizations handling cryptocurrency or financial transactions should monitor for related indicators, such as the resolved IP, nameservers, and SSL issuer. The domain's current offline status does not preclude future reactivation, so continued vigilance is advised.
ネットワークセキュリティインテリジェンス Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | betova.io |
phishing | Phishing Block |
| Hagezi Threat Feed | betova.io |
malicious | Sinkholed |
| DNS4EU | betova.io |
malicious | Sinkholed |
脅威対応 Pipeline
公開ブロックリスト登録状況
Latest Classified Outcome 2026-08-14 02:30:18 UTC
不正利用報告履歴 · 5 stored reports over 16 days · click to expand
-
Report #1 Apr 19, 2026 · 14:40 UTCPhishing Abuse Report: betova[.]ioabuse@nicenic.net
-
Report #2 ICANN CC 77h still active Apr 22, 2026 · 20:14 UTCESCALATION #2 (77h active): Phishing - betova[.]ioabuse@nicenic.net abuse@nic.io compliance@icann.org
-
Report #3 ICANN CC 170h still active Apr 26, 2026 · 17:12 UTCESCALATION #3 (170h active): Phishing - betova[.]ioabuse@nicenic.net abuse@nic.io compliance@icann.org
-
Report #4 ICANN CC 219h still active Apr 28, 2026 · 18:06 UTCESCALATION #4 (219h active): Phishing - betova[.]ioabuse@nicenic.net abuse@nic.io compliance@icann.org
-
Report #5 ICANN CC 376h still active May 5, 2026 · 06:40 UTCESCALATION #5 (376h active): Phishing - betova[.]ioabuse@nic.io compliance@icann.org
Casino / Gambling License Verification
使用技術 · 4 identified
Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com 信頼度 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 信頼度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 信頼度 100%VirusTotalによる分析
アーカイブ済み証拠
証拠および外部報告書
PD-1776598822-betova.io Recipient: abuse@nic.io このサイトによって何か影響を受けましたか?
アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
お住まいの地域の当局へ報告してください
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
任意のドメインを確認する
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャンフィッシングを報告する
不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポートリアルタイム脅威情報フィード
最近のフィッシングレポートと観察された可用性の変化
監視最新情報を入手し、安全を確保しましょう
リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください