mostbet15743[.]help

This domain, mostbet15743.help, is flagged as a high-risk credential phishing site targeting users through generic login-themed lures. Analysis indicates no direct association with a known brand or drainer kit, suggesting a standalone operation designed to harvest account credentials. The infrastructure lacks overt ties to established phishing frameworks, though the naming convention (numeric suffix) aligns with disposable phishing domains used in short-lived campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 38.244.195.34 and was registered on May 19, 2026, through DevExpanse Ltd d/b/a Regery.com. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. VirusTotal detection stands at 6/95 security vendors, indicating partial but not widespread recognition. Google Safe Browsing status is currently unblocked, and no public blocklist entries exceed single-digit counts, suggesting limited prior enforcement action. The domain remains active as of the latest verification, with no evidence of takedown or sinkholing. Response actions should include immediate submission to blocklists, monitoring for related domains using the same registrar or IP range, and alerting users to avoid interaction. The remaining risk is elevated due to the domain's persistence, low detection rate, and lack of prior mitigation, which may allow continued credential harvesting until broader enforcement measures are applied.