bahisteyim117[.]com

The domain bahisteyim117.com has been identified as a fake online casino login portal designed to harvest user credentials and financial information. Analysis indicates this is a case of brand impersonation, specifically targeting users of legitimate gambling and betting platforms by mimicking login interfaces. The domain is currently offline, though prior activity suggests it was actively used for credential theft and potential financial fraud. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which has been linked to other malicious activities. The domain appears on one security blocklist and is flagged by 3 of 95 security vendors on VirusTotal, indicating moderate detection but elevated risk. Additional threat intelligence confirms its presence in one AlienVault OTX pulse, further validating its malicious nature. The Gridinsoft trust score of 0/100 underscores the domain’s complete lack of legitimacy. Current status confirms the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure may resurface under a different domain or IP address. Organizations and users are advised to block the domain and its associated IP at the network level. Individuals who may have interacted with the site should immediately reset credentials for any accounts accessed during the exposure window. Monitoring for unauthorized transactions and enabling multi-factor authentication on financial and gaming accounts is strongly recommended to mitigate potential downstream risks.