usbs[.]io

Analysis of the domain usbs.io indicates active phishing infrastructure targeting users of the 789BET brand, as evidenced by the page title "789BET - Link Chính Hãng Uy Tín | Tải App 789BET 2026." The domain was registered on February 21, 2026, through Sav.com, LLC, and currently resolves to the IP address 188.114.96.3. Infrastructure analysis reveals the use of Cloudflare, WordPress, MySQL, PHP, jQuery Migrate, and jQuery, alongside HTTP/3 for content delivery. The domain holds a Gridinsoft trust score of 0/100 and appears on two security blocklists, including PhishDestroy and BLP-Malware. AlienVault OTX records show the domain in 24 threat intelligence pulses, suggesting broader recognition within the security community. Five of 95 security vendors on VirusTotal flag usbs.io as malicious, though the specific detection logic remains unconfirmed. The SSL certificate is issued by Google Trust Services, which does not inherently validate the legitimacy of the site. The domain remains active as of July 12, 2026, with no evidence of takedown or mitigation. Defenders should treat this domain as high-risk phishing infrastructure, particularly for users seeking 789BET-related services or applications. Further analysis of the site’s content and backend behavior is recommended to determine the full scope of the threat, though no login forms, tracking mechanisms, or additional brand impersonation details are currently confirmed.