limanebet779[.]com

This domain, limanebet779.com, is flagged as a credential theft operation targeting users of online betting services. Analysis indicates the site impersonates legitimate betting platforms to harvest login credentials, payment details, and personal information. No direct association with a known crypto drainer kit was observed, but the infrastructure and behavioral patterns align with credential harvesting campaigns commonly deployed in the gambling sector. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 172.67.164.61, a Cloudflare-protected endpoint, which may obscure further network-level attribution. VirusTotal detection metrics show 4 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100. Technologies detected include jQuery, SweetAlert2, OWL Carousel, jsDelivr, and HTTP/3, suggesting a modern, interactive frontend designed to mimic legitimate betting interfaces. As of the latest assessment, limanebet779.com has been taken offline, likely in response to security vendor interventions. However, the domain remains registered, and the infrastructure could be repurposed for future campaigns. Users who interacted with the site are advised to rotate credentials immediately, particularly for financial or betting-related accounts. Organizations should monitor for indicators of compromise, including the domain, IP, and associated technologies, and update blocklists to prevent future access attempts. The elevated risk level persists due to the domain's recent creation and the potential for re-emergence under similar infrastructure.