wanbo011[.]cv

The domain wanbo011.cv has been confirmed as a phishing site engaged in brand impersonation, specifically targeting users of Wanbo Sports, a known sports betting platform. Analysis indicates the site presents itself as an official partner of major football leagues, using the page title '万博体育|五大联赛官方合作伙伴' to deceive visitors into believing it is a legitimate sports betting portal. The domain is currently offline, but prior activity suggests it was designed to harvest user credentials and financial information under false pretenses. Infrastructure analysis reveals the domain was registered on March 04, 2026, through Dynadot LLC, an uncommon creation date that may indicate an attempt to evade detection by appearing as a newly established service. It resolves to the IP address 20.255.208.255 and is flagged by 13 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, a common choice for malicious actors due to its free and automated issuance process. Detected technologies include Bootstrap, Swiper, Moment.js, and jQuery, which are frequently used in both legitimate and fraudulent websites to create a polished user interface. Current status indicates the domain has been taken offline, likely due to enforcement actions or abandonment by the threat actor. However, the infrastructure remains a potential risk if reactivated. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should monitor for any re-registration attempts or shifts to similar domains using the same branding. Users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available. Financial institutions should be notified if payment details were entered on the site.