betoxe[.]com

This domain, betoxe.com, was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 57.129.97.29, which belongs to the OVH SAS network (AS16276) located in Germany. The hosting provider is identified as OVH, a common infrastructure used by malicious actors for rapid deployment. The site presented the page title “BETOXE | Enter the world of sport and stakes!” and was classified as a crypto‑gambling scam, indicating that the content likely encouraged users to deposit cryptocurrency for alleged gambling services. An SSL certificate with an E5 rating was observed, which does not guarantee trustworthiness but shows that transport encryption was enabled.

The domain appears on one security blocklist and has been flagged by the PhishDestroy blocklist, confirming that at least one external sinkhole has identified it as malicious. VirusTotal reports indicate that the domain was scanned by 93 antivirus and URL‑reputation vendors; none of the vendors reported a detection at the time of scanning. While the absence of detections does not prove the domain is benign, it suggests that the payload or page content had not yet matched known signatures. The current HTTP status is offline, limiting immediate interaction but not eliminating the risk that the infrastructure could be reactivated.

Uncertainties remain regarding the exact phishing kit, the full list of targeted brands, and whether any credential‑stealing forms were hosted before takedown. Defenders should add 57.129.97.29 to internal blocklists, monitor for any re‑appearance of betoxe.com in DNS queries, and enforce outbound filtering for crypto‑related traffic to known gambling‑related URLs. Network traffic to OVH AS16276 should be scrutinized for anomalous patterns, and any alerts from blocklist feeds mentioning betoxe.com should be treated as high priority.