manbetx-secure[.]com

This domain, manbetx-secure.com, is identified as a credential phishing site targeting users of the MANBETX SPORTS platform, a known online betting service. Analysis of the page title—万博体育官网 - 万博体育APP下载 - MANBETX SPORTS—confirms the impersonation of the legitimate brand to harvest login credentials. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential harvesting campaigns commonly used to facilitate subsequent financial fraud or account takeover attacks. Infrastructure analysis reveals the domain was registered on May 31, 2026, through Metaregistrar BV, an unusual future date suggesting potential domain spoofing or registry manipulation. The site resolves to the IP address 177.210.156.92 and has been flagged by 4 out of 95 security vendors on VirusTotal. It appears on three independent security blocklists and is actively blocked by at least three endpoint protection systems. Technologies detected include Bootstrap for frontend styling, Nginx as the web server, and HSTS implementation, which may be exploited to lend false legitimacy to the phishing page. As of the latest verification, manbetx-secure.com has been taken offline, likely in response to detection and reporting. However, the domain remains registered and could be reactivated or repurposed. The elevated risk level persists due to the potential for credential reuse across platforms, especially in regions where MANBETX SPORTS maintains user activity. Users who interacted with the site are advised to reset passwords on all accounts where similar credentials were used, enable multi-factor authentication, and monitor financial activity for unauthorized transactions. Organizations should update internal blocklists to include this domain and its associated IP to prevent future access attempts.