# m.padisahbet-guvenligiris.vip — SUSPICIOUS

> m.padisahbet-guvenligiris.vip is a credential-harvesting phishing page mimicking a betting login. VirusTotal flags 4/95 vendors. Review the full report.

## Summary
PhishDestroy identifies m.padisahbet-guvenligiris.vip as an active credential-harvesting site that masquerades as a legitimate betting login portal. Visitors who enter credentials risk immediate account takeover and potential financial loss. The domain features a convincing replica of a regional betting interface, luring victims into submitting usernames and passwords under the guise of verifying account security.

This domain was flagged by 4 out of 95 VirusTotal security vendors at the time of analysis. It was registered on March 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.97.3 using a Let's Encrypt-issued SSL certificate. The combination of recent registration, low detection rate, and spoofed login interface strongly indicates a targeted phishing campaign likely distributed via email or messaging platforms.

If you visited this site, do not enter any personal or login credentials. Change passwords for the affected account immediately on a secure device. Scan your system for malware using trusted antivirus software. Report the domain to your organization’s security team or to the platform being impersonated. Avoid clicking links in unsolicited messages and verify website URLs carefully before entering sensitive information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-21 22:30:25
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9d79447d-c0f7-462b-9d50-3c82b583615b
- PhishDestroy: https://phishdestroy.io/domain/m.padisahbet-guvenligiris.vip/
- LLM endpoint: https://phishdestroy.io/domain/m.padisahbet-guvenligiris.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/m.padisahbet-guvenligiris.vip/
Last updated: 2026-03-22