abtsport[.]com

This domain is flagged as a credential theft operation targeting users of sports betting platforms. The site displays Chinese-language content titled '每日赛事精选' (Daily Match Picks), suggesting it impersonates legitimate sports wagering services to harvest login credentials, payment details, or personal information from victims. Credential theft sites of this nature typically deploy fake login portals, account verification prompts, or fraudulent betting interfaces to trick users into submitting sensitive data, which is then exploited for financial fraud or sold on underground markets. Analysis indicates the domain was registered on April 2, 2026, through Dynadot Inc, a registrar frequently abused for malicious infrastructure. It resolves to the IP address 104.21.38.50, which is associated with content delivery networks commonly used to obfuscate hosting origins. The domain appears on one security blocklist and is flagged by 8 out of 95 security vendors on VirusTotal, including detections for phishing and fraudulent activity. The SSL certificate is issued by Let's Encrypt, a legitimate provider often leveraged by threat actors to lend false credibility to malicious sites. Infrastructure analysis reveals the domain was taken offline following detection, though similar campaigns frequently reemerge under new domains. Users who visited abtsport.com should immediately revoke any entered credentials, particularly for sports betting accounts, financial services, or email platforms. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Monitor linked bank accounts and credit reports for suspicious transactions, as stolen credentials may be used for follow-on fraud. If payment details were submitted, contact financial institutions to dispute unauthorized charges and request card reissuance. Report the incident to relevant cybersecurity authorities or fraud reporting platforms to aid in tracking and disrupting the campaign. Given the elevated risk level, affected users should assume their data is compromised and remain vigilant for targeted phishing attempts via email or messaging platforms.