gobeast[.]bet

This domain, gobeast.bet, is actively flagged as a high-risk phishing site targeting cryptocurrency users. Registered on February 20, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolves to IP address 188.114.97.3. As of July 29, 2026, twelve of ninety-one security vendors on VirusTotal detect this domain as malicious, and it appears on three independent security blocklists. Defensive platforms such as PhishDestroy, MetaMask, and SEAL have already blocked access, indicating a confirmed threat to wallet security.

Analysis of the infrastructure reveals no additional brand-specific targeting details or phishing kit identifiers at this stage. The domain's content has not been fully analyzed, so the exact mechanics of the phishing operation—whether credential harvesting, wallet-draining scripts, or fraudulent token claims—remain unverified. However, the presence of MetaMask in the blocklist suggests a likely focus on cryptocurrency wallet compromise. Defenders should treat this domain as an active threat.

Immediate actions include blocking the domain and its resolving IP at the network perimeter, updating endpoint protection rules, and monitoring for connections to 188.114.97.3. Given the domain's registration age and detection history, it is unlikely to be a false positive. Security teams should correlate logs for any user interactions with gobeast.bet and investigate potential exposure, particularly in environments where cryptocurrency transactions occur. Further analysis of the site’s code and behavior is recommended to determine the exact phishing methodology.