betsofa-de[.]com

Analysis indicates that betsofa-de.com is an active phishing domain targeting users through a betting or gambling-themed scam. The domain was registered on July 15, 2026, through Fewmoretaps OU, operating under the registrar Trustname.com. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare’s network, as further evidenced by its nameservers: cody.ns.cloudflare.com and robin.ns.cloudflare.com. This configuration is commonly observed in phishing campaigns leveraging Cloudflare’s services to obscure hosting details and evade takedowns. At the time of this assessment, the domain appears on one security blocklist, specifically PhishDestroy, and is flagged by one of ninety-five security vendors on VirusTotal. While the detection rate remains low, the domain’s recent registration and immediate appearance on a blocklist suggest deliberate malicious intent. No additional details regarding the specific brand being impersonated, the phishing kit in use, or the exact content of the site are available at this stage, as the page has not been fully analyzed. Defenders should treat this domain as high-risk due to its active status and association with known phishing indicators. Organizations are advised to block traffic to and from 188.114.97.3 and the domain betsofa-de.com at the network perimeter. Monitoring for related domains registered through Fewmoretaps OU or resolving to the same IP may help identify additional threats in this campaign. Given the domain’s recent creation and low detection count, continued vigilance and updates to security controls are recommended as more intelligence becomes available.