betocas[.]com

The domain betocas.com has been identified as a brand impersonation phishing site targeting the foundation brand. This domain was used to deceive users by mimicking a legitimate organization, posing an elevated risk of scam or fraudulent activity. As of now, betocas.com is offline, which reduces current exposure but does not eliminate the risk for those who may have interacted with it while it was active.

Technical analysis shows that betocas.com was registered through Web Commerce Communications Limited dba WebNic.cc on February 21, 2026. The domain resolved to IP address 104.21.80.1, hosted in the US under AS13335 (Cloudflare, Inc.), and used SSL issued by WE1. It appeared on 1 security blocklist (PhishDestroy), and 1 of 95 vendors on VirusTotal (alphaMountain.ai) flagged it as malicious. Google Safe Browsing did not flag the domain. The page title observed was BETOCAS | Open the world of luck and rewards!, and nameservers were ns100.webnic.cc and ns101.webnic.cc. AlienVault OTX also identified it in 1 threat intelligence pulse.

Anyone who interacted with betocas.com, especially if credentials or personal information were submitted, should immediately change passwords associated with the impersonated brand and enable two-factor authentication where possible. Monitor accounts for any suspicious activity or unauthorized transactions. Victims should also report incidents to the impersonated brand and relevant security authorities to help prevent further phishing scams using similar domains.