mostbet-live[.]org

PhishDestroy identifies mostbet-live.org as an active sportsbook-themed phishing domain designed to harvest user credentials under the guise of a legitimate live betting platform. The domain masquerades as a reputable sportsbook service, luring victims into entering login details or financial information under false pretenses. Threat actors are known to abuse such domains in credential-stuffing attacks, redirecting victims to fake payment portals to capture sensitive data including credit card numbers and personal identification. The domain’s infrastructure includes a Google Trust Services SSL certificate, which may lend an air of legitimacy to unsuspecting users but does not guarantee the site’s authenticity or safety. This domain was flagged with zero detections on VirusTotal (2/95 engines) as of the latest scan, indicating it remains undetected by most antivirus and threat intelligence platforms. The domain was registered through NameSilo, LLC on November 21, 2025, and resolves to IP address 104.21.84.47, which hosts multiple suspicious domains linked to fraudulent gambling and sportsbook impersonations. While the SSL certificate is issued by a trusted authority, this is a common tactic used by phishing operators to evade browser warnings and increase user trust. The domain’s recent creation date and lack of detection history suggest it is part of a newly launched campaign targeting users seeking live sports betting services. Users who visited mostbet-live.org or entered any information on the site should immediately cease use of the provided credentials across all accounts, enable multi-factor authentication on all related services, and monitor financial accounts for unauthorized transactions. It is strongly recommended to run a full antivirus scan using updated threat detection tools and consider a password reset for all potentially exposed accounts. If financial details were entered, contact the issuing bank or payment provider immediately to report fraud and request card replacement or transaction reversal. Reporting the domain to relevant cybersecurity authorities and the hosting provider may help disrupt ongoing operations and protect other potential victims.