betroke[.]com

The domain betroke.com is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a cryptocurrency platform but is designed to deceive victims into disclosing wallet credentials or transferring funds under false pretenses. As of the latest verification, betroke.com has been taken offline, though it previously operated as an active scam site with no associated drainer kit detected.

Technical indicators confirm the malicious nature of betroke.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered on 2025-09-12 15:14:56 through Web Commerce Communications Limited and resolves to the IP address 57.129.97.29, hosted on OVH SAS infrastructure in Germany. The SSL certificate is issued by XUI.one, and the observed page title was 'BETROKE | Enter the world of sport and stakes!'. Gridinsoft assigned a trust score of 0/100, while Scamadviser rated it 40/100. Nameservers are lex.ns.cloudflare.com and lisa.ns.cloudflare.com, and Google Safe Browsing has not flagged the domain.

Users who interacted with betroke.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor transaction histories for unauthorized activity. Report the domain to platforms such as PhishTank, Google Safe Browsing, or local cybercrime units to aid in takedown efforts. If credentials were entered, change passwords on all associated accounts and watch for signs of fraud or identity theft.