bet391[.]cc

The domain bet391.cc has been assessed as an elevated risk due to its confirmed brand impersonation of Bet365, a popular online gambling platform. This phishing site was designed to deceive users into revealing sensitive login credentials or financial information. PhishDestroy identified this threat through multiple intelligence sources, including 18 threat intelligence pulses on AlienVault OTX, and the domain was flagged by 23 out of 95 security vendors on VirusTotal. The site was registered through GoDaddy.com, LLC on October 21, 2025, and resolves to IP address 122.10.20.121. It uses an SSL certificate issued by Let's Encrypt (R13) to appear legitimate. The page title was explicitly set to 'bet365' to further impersonate the brand. The domain currently appears on 2 security blocklists and has been taken offline, but users should remain vigilant as similar domains may arise.

To protect against this Bet365 impersonation threat, users should never enter login credentials or financial details on any site accessed via unsolicited links or emails. Always verify the URL by manually typing the official Bet365 domain into the browser. Use PhishDestroy's domain checker to confirm the legitimacy of any suspicious domain before interacting with it. Enable two-factor authentication on your Bet365 account to add an extra layer of security. If you have already entered information on bet391.cc, change your Bet365 password immediately and contact their official support team to report the incident. Monitor your accounts for unauthorized transactions and consider placing a fraud alert on your credit report.