orisbet-bul[.]icu

The domain orisbet-bul.icu has been identified as a generic phishing site, particularly associated with brand impersonation. The current status of the domain is active, indicating that it is operational and may be in active use for malicious purposes.

Infrastructure analysis shows that orisbet-bul.icu resolves to the IP address 188.114.96.3 and was registered through Fewmoretaps OU. The domain was created on June 21, 2026, which raises immediate concerns as it is yet to be flagged by any of the 95 VirusTotal vendors, registering a detection count of 0. This may suggest that the domain is newly established or not widely recognized in existing threat databases. As a trust score assessment, the SSL certificate is provided by Google Trust Services, indicating a level of legitimacy in terms of encryption, yet this can be misleading in cases of phishing.

The current status remains active, and it is recommended that organizations monitor this domain closely. Users should be alert to any communications referencing orisbet-bul.icu and avoid interacting with content from this domain. Additionally, cybersecurity teams should consider blocking access to the IP address 188.114.96.3 and investigating any associated domains or IPs that may share infrastructure with this phishing attempt. Regular reviews of threat intelligence feeds for updates on this domain are crucial for ongoing risk mitigation.