bets10-adresguncelgiris[.]com

This domain, bets10-adresguncelgiris.com, is identified as a phishing infrastructure designed to harvest login credentials for the Bets10 online gambling platform. Analysis indicates the site impersonates the legitimate Bets10 login interface, tricking users into entering their account details under false pretenses. The threat type is classified as generic phishing, specifically targeting users seeking quick access to their gambling accounts, with the intent to exfiltrate credentials for unauthorized account access or financial fraud. Evidence supporting this assessment includes the domain's registration details and technical indicators. The domain was created on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with low-reputation domains. As of the latest scan, the domain has 0 out of 95 detections on VirusTotal, indicating it has not yet been widely flagged by security vendors. It appears on one security blocklist, suggesting initial detection by at least one threat intelligence source. The domain resolves to the IP address 172.67.138.153, utilizes Cloudflare for hosting, and employs a Let's Encrypt SSL certificate to mimic legitimacy. HTTP/3 is detected as the active protocol, a common feature in modern phishing campaigns to evade traditional detection mechanisms. Users who have visited bets10-adresguncelgiris.com or entered credentials on the site should take immediate action to mitigate potential risks. First, reset the password for the legitimate Bets10 account using a secure device and enable multi-factor authentication if available. Monitor the account for unauthorized transactions or changes, and report any suspicious activity to the platform's support team. Additionally, scan the device used to access the phishing site for malware, as credential harvesters may deploy secondary payloads. If financial information was entered, contact the relevant financial institution to secure accounts and review recent transactions for fraud. Users are advised to verify domain authenticity before entering credentials and to rely on official sources for account access.