madritbet50852[.]com

This domain, madritbet50852.com, is identified as an active phishing site specifically targeting users of the Madridbet online gambling platform. Analysis indicates the site employs generic phishing tactics to harvest credentials, payment details, and personal information under the guise of offering sports betting bonuses and account access. The domain currently remains operational, posing a high risk to unsuspecting users seeking legitimate gambling services. Infrastructure analysis reveals the domain was registered on June 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site resolves to the IP address 172.67.179.241, which has been linked to other malicious activities in recent threat intelligence reports. Detection metrics show that 2 of 95 security vendors on VirusTotal have flagged this domain as malicious, while AlienVault OTX records its presence in two distinct threat intelligence pulses. The page title, 'Madridbet Yeni Giriş 2026 | Site, Bonus ve Spor Bahisleri,' explicitly impersonates Madridbet’s branding, targeting Turkish-speaking users with fraudulent login and bonus offers. Current status confirms the domain remains active, with no evidence of takedown or mitigation at the time of this analysis. Users are strongly advised to avoid interacting with madritbet50852.com and any associated links. Organizations should implement network-level blocking for the domain and its resolving IP address, 172.67.179.241, while monitoring for further indicators of compromise. Individuals who may have engaged with the site should immediately reset credentials for any accounts accessed through it and review financial statements for unauthorized transactions.