wgdxf[.]vip

This domain wgdxf.vip is flagged as a high-confidence brand impersonation targeting Bet365, a major online sports betting and gambling platform. The domain was registered on September 12, 2025, through Dynadot LLC, a U.S.-based registrar, and was taken offline as of the report date of July 23, 2026. The page title recorded is 'bet365', confirming direct brand impersonation. The scam type is classified as Crypto Gambling, indicating the domain likely attempted to lure victims into depositing cryptocurrency under false pretenses of a legitimate Bet365 service. Infrastructure analysis shows the domain resolves to IP address 118.107.248.72, which is hosted in Hong Kong on AS132825 operated by MYTEK TRADING PTY LTD.

The nameservers are austin.ns.cloudflare.com and leia.ns.cloudflare.com, both belonging to Cloudflare, which may have been used to obscure the true hosting origin. No SSL certificate was detected, meaning the site lacked HTTPS encryption, a common trait in low-effort phishing operations. The domain is flagged by 18 out of 93 security vendors on VirusTotal, indicating widespread detection across multiple threat intelligence feeds. It appears on one security blocklist and is specifically blocked by PhishDestroy, a phishing domain blocklist provider. AlienVault OTX includes this domain in two threat intelligence pulses, suggesting it has been actively tracked by the security community.

The Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trustworthiness. Key uncertainties remain: the specific method of distribution (e.g., email, social media, or search ads) is not documented, and the exact page content beyond the title has not been analyzed. Defenders should ensure any internal blocklists or DNS filtering solutions include this domain and its associated IP address. The domain's registration through a U.S.-based registrar but hosting in Hong Kong suggests a deliberate cross-jurisdictional setup to complicate takedown efforts.