Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 13. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

77145[.]cc

“welcome-BET365”

Threat verdict Critical 93/100 evidence score
Availability Content unavailable Content was unavailable in the latest observation
VirusTotal detections: 13/91 Brand impersonation: Bet365
OTX: 1 ref Jul 8, 2026 Bet365
Evidence Summary
CRITICAL
Ref
A40A368A
Score
93/100

This domain, 77145.cc, is identified as a credential harvesting phishing infrastructure designed to deceive users into submitting sensitive login credentials, financial details, or personal information. Analysis indicates the site employs common phishing tactics, including cloned login portals, fake authentication prompts, and urgency-driven messaging to manipulate victims. The domain’s infrastructure is optimized for rapid deployment and evasion, making it a persistent threat to both individual and organizational security. Evidence supporting this assessment includes detection by 11 out of 95 security vendors on VirusTotal, with signatures classifying it as generic phishing. The domain was registered on July 20, 2024, through Gname.com Pte. Ltd., a registrar frequently associated with high-turnover malicious domains. It resolves to the IP address 103.27.177.163, which has been linked to other phishing campaigns in recent months. Additionally, the domain appears in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious intent. The SSL certificate, issued by Let’s Encrypt, is valid and commonly used to lend a false sense of legitimacy to phishing sites. Users who have visited 77145.cc or interacted with any content hosted on this domain should take immediate remedial action. Disconnect from the site if still active in the browser and clear all cached data to prevent persistent access. Change passwords for any accounts accessed while the domain was open, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication on all critical accounts to mitigate the risk of unauthorized access. Monitor financial statements and account activity for signs of compromise, such as unauthorized transactions or login attempts. Organizations should block the domain and its associated IP at the network perimeter and conduct a review of endpoint logs for connections to 103.27.177.163 or 77145.cc. Report the domain to internal security teams or relevant threat intelligence platforms to aid in broader mitigation efforts.

VirusTotal
VirusTotal
13 det.
OTX references
URLScan
URLScan
TLS Certificate
Let's Encrypt / YR2
Age
2.1 yr
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Data coverage VirusTotal 13 / 91 URLQuery source data unavailable PhishStats not checked OTX 1 community reference CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS valid certificate, 31d WHOIS 25 mo old Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
13/14

Public Blocklist Status

Stored Capture

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN Nginx · AS18186 NEBULA-GLOBAL - Nebula Global LLC, US
IP Reputation abuse score 0/100 0 reports checked Jul 8, 2026
Registrar Gname SG(SG)
IP Address 154.39.104.130 HK
GeoHK Hong Kong, HK
NetworkAS18186 · AS135357 HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
RegistrationCreated Jul 20, 2024 Expires Jul 20, 2026
Time to First Unavailability 3h
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedJul 8, 2026
DOM Analysisanalyzed Jul 8, 2026score 93/100
IoC Extractionscanned Jul 29, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://77145.cc/
Nameserversa.share-dns.comb.share-dns.net
TLS Fingerprint
TLS Observationvalid from Jun 19, 2026scanned Jul 8, 2026
TLS SAN Domains70779.cc70791.cc72644.xyz73212.xyz73232.xyz73670.xyz73719.xyz73726.xyz75440.xyz76115.xyz76118.xyz76134.xyz76143.xyz76176.xyz76177.xyz+42
Page Title
welcome-BET365
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt / YR2 · valid for 31 days
Technologies · 5 identified
Vue.js
JavaScript frameworks

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

vuejs.org 100% confidence
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org 100% confidence
HSTS
Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org 100% confidence
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

13 / 91 security vendors flagged this domain
View on VT
Last analyzed
alphaMountain.ai
BitDefender
Cluster25
CRDF
ESET
Forcepoint ThreatSeeker
G-Data
Gridinsoft
Kaspersky
LevelBlue
OpenPhish
SOCRadar
Webroot

Evidence & External Reports

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/77145.cc"
  title="PhishDestroy threat report for 77145.cc"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>