pusulabet-orijinal[.]icu

This domain, pusulabet-orijinal.icu, is an active credential harvesting platform designed to impersonate legitimate online betting services. Analysis indicates the site employs cloned interfaces and fraudulent login portals to deceive users into submitting sensitive account credentials, payment details, or personal identification information. The infrastructure is optimized for rapid deployment and evasion, with recent creation dates and minimal initial detection rates suggesting a targeted campaign against users of specific regional gambling platforms. Infrastructure analysis reveals the domain was registered on July 02, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-volume phishing operations. It currently resolves to the IP address 188.114.97.3, which has been observed in multiple transient phishing clusters. Detection metrics show minimal coverage, with only 1 of 95 security vendors flagging the domain on VirusTotal, while it appears on a single security blocklist. The domain maintains an SSL certificate issued by Google Trust Services, providing a false sense of legitimacy to potential victims. Users who have visited pusulabet-orijinal.icu or entered credentials on the site should immediately revoke any submitted login information from associated accounts. All passwords, security questions, and linked payment methods must be updated across any platforms where identical or similar credentials may have been reused. Monitoring for unauthorized transactions or account modifications is strongly advised. If financial data was exposed, affected users should initiate fraud alerts with relevant institutions and consider credit monitoring services to detect potential misuse. The domain remains active as of this analysis, and continued vigilance is recommended for individuals targeted by this campaign.