locabet-yeni[.]info

This domain, locabet-yeni.info, is flagged as a high-risk credential phishing site based on multiple threat intelligence sources. Registered on March 6, 2026, through NiceNIC International Group Co., Limited, the domain remains active as of July 12, 2026. It resolves to the IP address 188.114.96.3 and uses a Let's Encrypt SSL certificate, which does not inherently indicate malicious intent but is commonly observed in phishing infrastructure due to its low-cost and automated issuance. Analysis indicates the domain has been detected by 4 out of 95 security vendors on VirusTotal, a relatively low detection rate that may suggest evasion techniques or recent deployment. However, it appears on 2 security blocklists and is referenced in 24 threat intelligence pulses, signaling broader recognition within the security community. The page title 'Un instant…' is consistent with temporary loading or redirect pages often used in phishing campaigns to obscure the final malicious destination or delay user interaction. The exact content or target of the phishing campaign is not yet analyzed, as no brand or specific scam category has been confirmed. Defenders should treat this domain as actively malicious and prioritize blocking it at the DNS or network level. Given its presence on multiple blocklists and its association with known phishing infrastructure, further investigation into related IPs, domains, or certificates is recommended to identify potential lateral movement or additional compromised assets. No evidence suggests this domain is part of a larger campaign beyond the current phishing classification, but monitoring for changes in detection rates or infrastructure updates is advised.