betaroi[.]ltd

Analysis indicates that the domain betaroi.ltd was registered through GoDaddy.com, LLC on June 12, 2022. The domain remains active as of the report date, July 27, 2026, and resolves to the IPv4 address 158.69.177.111. Authoritative name servers listed for the zone are ns5.ddoscure.com, ns6.ddoscure.com, protected3.ddoscure.com, and protected4.ddoscure.co, suggesting infrastructure that is shared with other suspicious hosts observed in prior threat intel. The domain is present on one external security blocklist and is explicitly blocked by the PhishDestroy mitigation service, confirming that upstream defenders have taken action against it.

VirusTotal observations show that six of ninety‑one scanning engines have flagged the domain, providing independent confirmation of malicious behavior. The classified threat type is generic phishing, and the risk rating is high. Publicly available data does not include a page title, SSL certificate details, HTTP response codes, or any observed content payload, limiting the ability to describe the exact phishing lure or target brand.

Consequently, the precise victim‑facing technique employed by betaroi.ltd remains unknown, though its categorization as generic phishing implies that it likely hosts credential‑harvesting pages or deceptive login forms. Defenders should continue to block the domain at network perimeter and DNS layers, add the associated IP address 158.69.177.111 to host‑based deny lists, and monitor for any new DNS resolutions to the listed name servers. Ongoing telemetry collection from URL filtering and endpoint detection platforms is recommended to capture any future activity that may reveal additional indicators such as payload URLs, certificate fingerprints, or malicious redirects.