m[.]wwwgalabet26[.]vip

PhishDestroy identifies m.wwwgalabet26.vip as an active sports betting phishing site impersonating the Galabet brand.

This domain was flagged by exactly 3 of 95 VirusTotal security vendors for malicious activity. It was registered through Dynadot Inc, resolves to IP 172.67.153.158, and was created on May 06, 2026. The site’s page title explicitly mimics Galabet’s mobile login page, positioning it as a credential-harvesting trap for unsuspecting users seeking sportsbook access.

The domain remains live and poses a high risk due to its deceptive branding targeting Galabet users. Technical indicators include a Let’s Encrypt SSL certificate, which enhances trust perception despite malicious intent. Blocklist participation is evident through VirusTotal detections, and the recent registration date suggests opportunistic deployment.

Users must avoid interacting with m.wwwgalabet26.vip and verify official domains via Galabet’s legitimate communications channels. Organizations should block this domain at DNS and firewall levels and investigate internal network activity for related indicators. Immediate reporting to security teams and domain registrars is advised to mitigate further exploitation.