9kp5[.]com

This domain 9kp5.com is assessed as a phishing infrastructure endpoint designed to imitate a betting or credential login platform. The observed page title "beat·365|信誉平台" indicates attempts to present a trusted gambling service facade while likely collecting sensitive user credentials. The infrastructure behavior aligns with generic_phishing patterns where users are redirected to counterfeit login interfaces to harvest account data.

Technical telemetry shows multiple independent risk indicators. VirusTotal reports 17/95 security vendors flagging the domain as malicious. The domain was registered on August 26, 2025 via Gname.com Pte. Ltd., a registrar frequently associated with high-volume disposable domains. Network resolution points to IP 50.2.232.124 under AS62904 (Eonix Corporation, US). Additionally, the domain appears on 2 security blocklists and is currently taken offline, suggesting enforcement action or takedown following abuse detection.

If this domain was accessed, users should assume credential exposure risk. Immediate mitigation steps include changing any passwords entered on related sites, especially financial or betting accounts, and enabling multi-factor authentication where available. Endpoint systems should be scanned for potential malware persistence or browser-based token theft. Security teams should block the IP 50.2.232.124 and domain 9kp5.com at network perimeter controls and review logs for any inbound traffic prior to takedown. Users should also clear browser cache and revoke any sessions associated with suspicious login activity.