89betlc[.]com

This domain, 89betlc.com, was designed to steal login credentials from users attempting to access the 89BET gambling platform. The site presented itself as an official link provider for 89BET.COM, using localized Vietnamese-language content to deceive visitors into entering account details. Such credential theft operations typically harvest usernames, passwords, and financial information for unauthorized account access or resale on underground forums. Analysis indicates the domain was registered on August 11, 2025, through NAMECHEAP INC, a registrar frequently exploited for malicious infrastructure. At the time of detection, 18 out of 95 security vendors on VirusTotal flagged the domain as malicious, with one commercial blocklist (PhishDestroy) already listing it. The site resolved to Cloudflare IP 172.67.148.115 (AS13335) and used a Google Trust Services SSL certificate (WE1), a common tactic to appear legitimate while masking hosting origins. If you visited 89betlc.com or entered any credentials, immediately change passwords for all associated accounts, especially 89BET or other gambling platforms. Enable multi-factor authentication where available and monitor accounts for unauthorized transactions. Avoid reusing passwords across sites, as stolen credentials may be tested elsewhere. The domain is currently offline, but threat actors may reuse infrastructure or registration patterns for future campaigns. Report the incident to your organization’s security team or relevant financial institutions if monetary loss is suspected.