enroll-rb88[.]com

This domain, enroll-rb88.com, is actively engaged in credential harvesting phishing operations targeting users of a sports betting platform. The site presents itself as an official download portal for a mobile application and account registration service, using localized language (Chinese) to appear legitimate. Visitors are likely to encounter fake login forms or prompts to enter sensitive account details, which are then captured by threat actors for unauthorized access or financial fraud. Analysis indicates the domain was registered on June 22, 2026, through the registrar Gransy, s.r.o., an entity frequently associated with high-risk domains. As of the latest scan, only 2 out of 95 security vendors on VirusTotal have flagged the domain as malicious, suggesting either recent deployment or evasion techniques to avoid detection. The site resolves to the IP address 118.107.27.52 and uses a Let's Encrypt SSL certificate, which provides an appearance of security while masking its fraudulent intent. Additional threat intelligence confirms its presence in one AlienVault OTX pulse, further corroborating its malicious classification. If you or someone in your organization has visited enroll-rb88.com, immediate action is required. Disconnect the affected device from the network to prevent potential data exfiltration. Reset any credentials entered on the site, particularly those related to financial services or email accounts. Monitor linked accounts for unauthorized transactions or login attempts. Report the incident to your internal security team or a trusted cybersecurity professional for further analysis, including checking for malware or backdoors that may have been installed during the visit.