betasusyeni2026[.]com

PhishDestroy identifies an active phishing campaign hosted on betasusyeni2026.com, a domain impersonating a legitimate betting service to harvest user login credentials and financial data. The site resolves to IP 45.10.243.69 and uses a Let’s Encrypt SSL certificate to appear legitimate. Despite zero detections on VirusTotal as of seed 9c5178, the domain’s recent creation date (March 09, 2026) and registration through the obscure registrar Fewmoretaps OU d/b/a Trustname.com raise immediate red flags for fraudulent intent.

This threat operates by tricking users into believing they are accessing a trusted betting platform, likely through targeted ads, spoofed emails, or search engine manipulation. Once a victim enters their credentials or payment details on the fake login or checkout page, the data is immediately exfiltrated to attacker-controlled servers. The use of Let’s Encrypt for SSL suggests an attempt to bypass browser warnings, while the lack of detections on VirusTotal (0/95) indicates the domain is either very new or employs evasion tactics not yet flagged by security engines.

If you visited betasusyeni2026.com, do not enter any personal or payment information. Disconnect from the site immediately and run a malware scan on your device. Change passwords for all accounts using the same credentials, especially banking or email accounts. Report the domain to your IT team or security provider, and flag the site for takedown via tools like Google Safe Browsing or your browser’s reporting feature. Enabling two-factor authentication (2FA) on critical accounts can mitigate further damage if credentials were compromised.