huangguantiyu[.]app

The domain huangguantiyu.app is assessed as having an elevated risk level and is specifically flagged for credential theft. This type of threat typically aims to steal login credentials and sensitive information from users.

Analysis indicates that huangguantiyu.app was registered through GNAME.COM PTE. LTD. and resolves to the IP address 83.150.226.139. The domain was created on March 30, 2026. The SSL certificate is issued by Let's Encrypt, which is a common choice for legitimate and malicious sites alike. VirusTotal reports that 6 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The page title, '皇冠体育app - 2026世界杯|欧冠|西甲|法甲|德甲|英超专业体育赛事投注平台', suggests that the site is impersonating a legitimate sports betting platform, which is a common tactic in credential theft attacks.

To mitigate the risk of credential theft, users should avoid entering any personal or login information on this domain. Implementing multi-factor authentication (MFA) for all sensitive accounts can significantly reduce the impact of stolen credentials. Additionally, network administrators should consider blocking access to this domain and monitoring for any unusual login activities or data exfiltration attempts.