betofon[.]cc

The domain betofon.cc is identified as a brand impersonation threat specifically targeting online crypto casino and gambling platforms. Analysis confirms this domain is currently offline, though prior activity impersonated legitimate blockchain-based gambling services under the name 'Betofon: Most Popular Online Crypto Casino Based on Blockchain.' The threat type aligns with fraudulent schemes designed to deceive users into engaging with malicious financial platforms. Infrastructure analysis reveals the domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, an unusually future-dated creation that may indicate falsified records or preemptive registration abuse. It resolves to the IP address 172.67.180.136, hosted on AS13335 Cloudflare, Inc., a common proxy service used to obscure malicious infrastructure. Security vendor detections report 17 of 95 engines on VirusTotal flagging the domain as malicious, while it appears on one security blocklist. Notably, the domain lacks an SSL certificate, further reducing user protection and increasing exposure to interception risks. Given the elevated risk level and confirmed offline status, users are advised to avoid interaction with betofon.cc. Organizations should update blocklists to include this domain and monitor for related infrastructure, particularly those leveraging Cloudflare IP ranges. Users who may have engaged with this domain should verify transaction histories and wallet security, as brand impersonation in crypto gambling often precedes credential theft or unauthorized fund transfers.