mlbt[.]cc

Analysis of mlbt.cc indicates a high-risk phishing domain targeting users of the MelBet brand, as evidenced by the page title 'MelBet' and classification by security vendors. The domain was registered on September 30, 2022, through Wild West Domains, LLC, and remains active as of July 12, 2026. Infrastructure analysis reveals it resolves to IP 46.32.183.222, hosted on AS202492 (SILVERHILL GROUP HOLDING LTD) in Seychelles. The site returns an HTTP 302 redirect status, suggesting it may be part of a larger redirection chain or evasion tactic. SSL certification is provided by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. Detected technologies include WordPress, MySQL, PHP, Nginx, and third-party services such as Salesforce, Zendesk, and Optimizely, which may be used to enhance credibility or track victims. The domain is flagged by 3 of 95 security vendors on VirusTotal and appears in 23 threat intelligence pulses on AlienVault OTX, confirming its malicious classification. It is also listed on one security blocklist. Defenders should treat this domain as actively hostile and prioritize blocking at DNS, proxy, and endpoint layers. The exact phishing kit or payload is not yet analyzed, but the presence of WordPress and PHP suggests potential for credential harvesting or malware distribution. Further investigation into associated IPs, nameservers (ns31.domaincontrol.com, ns32.domaincontrol.com), and redirect chains is recommended to identify linked infrastructure.