1xbet-aviator[.]in

This domain, 1xbet-aviator.in, is flagged as a generic_phishing threat designed to deceive users of online gambling platforms. Analysis indicates no direct association with a known brand-drainer kit, but the domain mimics legitimate gambling services to harvest credentials or financial details. The page title 'Welcome!' suggests a minimalist landing page, likely intended to bypass automated detection while engaging victims. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, and resolves to the IP address 172.67.134.133. VirusTotal reports 4 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is blocked by PhishDestroy. Technologies detected include C, Perl, Angie, and HSTS, which may indicate attempts to obfuscate malicious activity or enforce secure connections for phishing purposes. As of the latest assessment, 1xbet-aviator.in has been taken offline, reducing immediate risk to users. However, the domain's recent creation date and low detection rates suggest it may have been part of a short-lived campaign. Remaining risks include potential re-registration or migration to a new domain. Users are advised to verify gambling-related domains through official sources and monitor for unauthorized transactions if credentials were previously entered on suspicious sites.