padisahbettggiris[.]icu

The domain padisahbettggiris.icu is currently flagged as a high-risk phishing site targeting users of online betting portals. Analysis indicates this infrastructure is designed to harvest credentials or financial details under the guise of a legitimate betting service. The domain remains active as of the latest verification, with no signs of takedown or mitigation efforts. Infrastructure analysis reveals the domain was registered on June 13, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.22.65, hosted on Cloudflare’s network (AS13335), which is commonly leveraged to obfuscate origin servers. The SSL certificate is issued by Google Trust Services (WE1), adding a superficial layer of legitimacy. Detection metrics show 12 of 95 security vendors on VirusTotal have flagged the domain, and it appears on at least one security blocklist. The page title, 'padisahbettggiris.icu | 520: Web server is returning an unknown error,' suggests either misconfiguration or deliberate evasion of automated analysis tools. Current status confirms the domain remains operational, posing an ongoing threat to users. Organizations and individuals are advised to block the domain and its associated IP at the network level. End-users should be cautioned against interacting with any content hosted on padisahbettggiris.icu, particularly login forms or payment requests. Security teams are recommended to monitor for related domains registered under the same registrar or resolving to the same IP range, as this campaign may expand to additional infrastructure.