batnorex[.]com

Analysis of batnorex.com confirms it as a phishing domain targeting users through a gambler scam, specifically impersonating the brand 'blast'. The domain was registered on July 12, 2025, through MAT BAO CORPORATION and is currently offline as of July 25, 2026. Infrastructure analysis reveals it resolved to IP 57.129.97.29, hosted on OVH SAS (AS16276) in Germany, with Cloudflare nameservers (clyde.ns.cloudflare.com and luciane.ns.cloudflare.com). No SSL certificate was detected, increasing the risk of unencrypted data interception.

The domain is flagged by one security blocklist and was blocked by PhishDestroy. Detection engines on VirusTotal identified the domain as malicious, with 10 of 95 security vendors marking it as phishing or fraudulent. Trust scores from Scamadviser (1/100) and Gridinsoft (0/100) further indicate high-risk activity. The page title, 'BATNOREX | Enter the world of sport and stakes!', aligns with the classified 'Gambler Scam' phishing kit, suggesting an attempt to lure victims with promises of sports betting or gambling opportunities.

Defenders should treat this domain as confirmed malicious. Recommended actions include blocking the domain and its associated IP at the network perimeter, updating endpoint protection rules to flag any attempts to access it, and monitoring for related infrastructure (e.g., Cloudflare nameservers, OVH-hosted IPs) that may reappear under new domains. Given the domain's recent registration and offline status, further monitoring for reactivation or migration to new infrastructure is advised. No additional content analysis is available, as the site is currently inaccessible.