betzz[.]cm

Analysis as of July 23, 2026 indicates that betzz.cm is an active brand‑impersonation site targeting Bet365 users. The domain was registered on 10 December 2025 through Netcom.cm Sarl and resolves to 118.107.248.72, an address announced by AS132825 (MYTEK TRADING PTY LTD) located in Hong Kong. DNS is served by Cloudflare (annalise.ns.cloudflare.com, keaton.ns.cloudflare.com). The web server stack includes Nginx, OpenResty and Amazon CloudFront on Amazon Web Services, with HTTP 200 responses and an active TLS certificate issued by Let’s Encrypt (R13). The page title returned by the server is “bet365”, matching the declared brand target. The site is classified as a crypto‑gambling scam and explicitly impersonates Bet365.

Reputation signals are uniformly negative: Gridinsoft assigns a trust score of 0 / 100, Scamadviser 1 / 100, and the domain appears on one known security blocklist. VirusTotal analysis shows that 14 of 95 scanned security vendors flag the domain, and an AlienVault OTX pulse references it once. PhishDestroy also lists the domain as blocked. The combination of low trust scores, multiple vendor detections, and blocklist inclusion suggests a high likelihood of malicious activity. Uncertainty remains regarding the exact payload delivered to victims, as no visual or content analysis is available beyond the page title. The internal structure of the site, any credential‑stealing forms, or cryptocurrency transaction mechanisms have not been publicly disclosed.

Likewise, the presence of additional supporting infrastructure has not been observed. Defenders should immediately block betzz.cm at DNS and proxy layers, and consider blacklisting its IP address 118.107.248.72. Monitoring of outbound traffic to the AS132825 network is advised. Given the Let’s Encrypt certificate, certificate pinning is ineffective; therefore, heuristic or reputation‑based filtering should be employed.