pizda[.]bet

PhishDestroy identifies pizda.bet as an active credential harvesting domain under investigation for phishing activities. This domain was flagged due to its recent creation date, lack of detection coverage, and association with known malicious infrastructure. Users and organizations are advised to treat this domain with high suspicion and implement immediate defensive measures to mitigate potential risks. pizda.bet exhibits multiple red flags indicative of a malicious campaign. The domain was registered on March 10, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently leveraged by threat actors for short-lived malicious domains. VirusTotal currently shows 0 detections out of 95 security vendors, suggesting this domain has evaded detection by most scanning engines. Additionally, the domain resolves to IP address 188.114.96.3, which may have additional malicious associations pending further analysis. The presence of a Let's Encrypt SSL certificate further enhances the domain's legitimacy, potentially tricking users into trusting the phishing page. The risk level of pizda.bet remains under investigation, but its active status and lack of detection coverage warrant immediate caution. If users or employees have accessed this domain or entered credentials, they should assume compromise and take proactive steps to secure their accounts. Users are advised to change passwords for any accounts associated with this domain and enable multi-factor authentication where possible. Organizations should block this domain at the network perimeter and inspect DNS logs for any internal resolutions. Given the domain's recent registration and low detection rate, it is likely part of a broader phishing campaign that could escalate rapidly. Continuous monitoring and threat hunting for related infrastructure are strongly recommended to prevent further compromise.