inclusivebets[.]fun

This domain, inclusivebets.fun, is identified as a credential harvesting phishing site targeting users through fraudulent betting or financial service interfaces. Analysis indicates the site was designed to mimic legitimate online betting platforms, likely to deceive visitors into submitting sensitive login credentials, payment details, or personal information under false pretenses. The page title, 'Home | Inclusivebets,' suggests an attempt to establish perceived legitimacy, while the infrastructure supports rapid deployment and evasion of detection mechanisms commonly employed in phishing campaigns. Infrastructure analysis reveals the domain was registered through REGRU-RU, a registrar frequently associated with high-risk domains due to its lenient registration policies. The domain was created on February 21, 2026, an anomalous future date that may indicate falsified registration details or an attempt to obscure the true timeline of malicious activity. At the time of assessment, the domain resolved to the IP address 172.67.188.248, a hosting provider often utilized for content delivery networks that can mask the true origin of malicious traffic. Detection metrics further substantiate the threat: VirusTotal reports 2 out of 95 security vendors flagged the domain as malicious, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist, and automated phishing detection systems have already classified it as a confirmed threat. Users who visited inclusivebets.fun or interacted with its content should take immediate remedial actions to mitigate potential compromise. All credentials entered on the site must be considered exposed and should be changed across any other platforms where identical or similar passwords were reused. Affected users are advised to review financial statements for unauthorized transactions and enable multi-factor authentication on critical accounts to prevent further unauthorized access. System scans using updated security tools are recommended to detect any secondary infections or persistent threats. Given the elevated risk level, organizations should update their web filtering rules to block the domain and its associated IP address to prevent further exposure within their networks.