bahispedia[.]one

The domain bahispedia.one is currently active and engaged in credential phishing targeting users of Turkish online betting platforms. Analysis of the page title, "Türkiye İçin En İyi Bahis Siteleri | Bahis Pedia," indicates an attempt to impersonate legitimate betting sites to harvest user credentials, financial details, or personal information. The domain is classified as high-risk due to its deceptive content and confirmed phishing infrastructure. Infrastructure analysis reveals the domain was registered through Dynadot Inc on May 27, 2024, with an anomalous creation date discrepancy suggesting potential domain spoofing. It resolves to IP address 15.235.115.30, hosted on OVH SAS (AS16276) in Canada. The domain is flagged by 13 of 95 security vendors on VirusTotal and appears on one security blocklist. The SSL certificate, issued by Let's Encrypt (R12), provides encryption but does not validate legitimacy. Additional indicators include its detection by PhishDestroy and a low trust score across threat intelligence platforms. Current status confirms bahispedia.one remains operational, posing an ongoing threat to users seeking betting services. Organizations and individuals are advised to block the domain and associated IP at the network level. Users should avoid interacting with the site and verify the authenticity of betting platforms through official channels. Security teams are recommended to monitor for related domains registered under the same registrar or resolving to the same IP range, as these may indicate further phishing campaigns.