soles[.]bet

Domain soles.bet has been identified as a sports betting-themed phishing site actively targeting users with fraudulent wagering opportunities. PhishDestroy’s automated threat analysis confirms this domain is currently operational and being used to harvest login credentials and payment details under the guise of a legitimate online sportsbook. The threat is classified as generic phishing with a medium operational footprint, currently under active investigation by multiple threat intelligence teams.

This domain was flagged by 8 of 95 VirusTotal vendors, indicating a low detection rate despite clear malicious intent. It is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to IP address 188.114.96.3, and was created on March 31, 2026. It employs a valid Let's Encrypt SSL certificate, which may help it evade browser-based security warnings. The domain exhibits no detections on major blocklists at this time, though its recent creation and lack of historical reputation suggest a high risk of rapid blacklisting in the near future.

Given the active status and low detection rate, users should immediately block access to soles.bet at the network and endpoint level. Organizations are advised to add the domain and its resolving IP (188.114.96.3) to firewall deny lists and DNS sinkholes. End users should be warned not to engage with any login prompts or payment forms on this site. Security teams should monitor for outbound connections to this IP and investigate any internal hosts attempting to resolve the domain. Threat hunting queries should focus on recent creation dates (March 31, 2026) and SSL certificate issuance patterns associated with Let's Encrypt in the last 30 days.