eranbet[.]com

Analysis of the domain eranbet.com shows a clear pattern of brand impersonation targeting Google. The domain was registered on March 11, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure, as indicated by the presence of Cloudflare Browser Insights and the authoritative nameservers andy.ns.cloudflare.com and melina.ns.cloudflare.com. DNS resolution points to IP address 142.251.151.119, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site’s HTML title reads "Google Chrome - The Fast & Secure Web Browser Built to be Yours," directly invoking Google’s product name and supporting the classified scam type of brand impersonation.

The domain appears on a single public blocklist and has been actively blocked by the PhishDestroy service. VirusTotal scans have recorded four positive detections out of ninety‑four security vendors, reinforcing the malicious assessment. Current monitoring indicates the site has been taken offline, but the historical footprint remains relevant for threat‑intelligence correlation.

While the page content beyond the title has not been publicly disclosed, the combination of registrar details, Cloudflare hosting, and the Google‑related title provides sufficient evidence for defenders to treat the domain as a malicious impersonation vector. Security teams should continue to block any traffic to eranbet.com, ensure that URL filtering solutions reference the observed blocklist entry, and monitor for potential reuse of the same infrastructure in future campaigns. Additional scrutiny of related Cloudflare‑hosted domains registered through the same registrar may reveal further impersonation attempts. The evidence presented supports an elevated risk rating and justifies inclusion in organizational threat‑feeds until the domain is permanently retired.