betgitadresi[.]icu

PhishDestroy identifies domain betgitadresi.icu as an active crypto drainer impersonating GitHub, currently flagged at elevated risk. The domain leverages brand impersonation to trick users into connecting crypto wallets, enabling unauthorized asset transfers. This threat is operational and poses immediate risk to cryptocurrency users engaging with perceived development or support channels.

The domain betgitadresi.icu was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 26, 2026. It resolves to IP address 188.114.96.3 and holds a valid Let's Encrypt SSL certificate. PhishDestroy confirms this domain is flagged by 2 of 95 VirusTotal security vendors, indicating low but present detection coverage. The domain has no documented trust scores and has not been widely blocklisted at this time, increasing exposure to potential victims.

Current status of betgitadresi.icu remains active and unresolved. PhishDestroy recommends immediate network-level blocking via DNS or firewall rules targeting the domain and IP (188.114.96.3). Users should avoid visiting this domain and verify any GitHub-related links through official channels only. Organizations are advised to update threat intelligence feeds and share IOCs with security partners. Continuous monitoring is required due to the domain's recent creation and low detection rate.