bets10-tr[.]8881[.]lat

The domain bets10-tr.8881.lat was registered through Dynadot Inc on June 11, 2026 and is actively resolving to the IP address 172.67.178.236. Infrastructure analysis shows the domain is serviced by Cloudflare, using the authoritative nameservers lorna.ns.cloudflare.com and mustafa.ns.cloudflare.com. Threat intelligence indicates that the domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, confirming its classification as a phishing vector.

VirusTotal reports that 6 of 91 security vendors have flagged the domain, providing independent corroboration of malicious intent. No additional contextual data such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are presently available, leaving the exact phishing content and target brand undefined. Defenders should prioritize adding the domain to local deny lists, enforce DNS sinkholing for the resolved IP, and monitor outbound traffic for connections to 172.67.178.236.

Given the recent registration date and the presence on a reputable blocklist, any email or web traffic that references bets10-tr.8881.lat should be treated as high‑risk and blocked. Continuous re‑evaluation is advised as further analysis (e.g., page content scraping or sandbox execution) becomes available, which may reveal the specific credential‑capture tactics or targeted brand. Until such enrichment occurs, the recommended mitigation steps remain strict network denial, user awareness alerts regarding unsolicited requests to the domain, and periodic review of threat intelligence feeds for any changes in detection counts or additional blocklist listings.