a77c[.]xyz
“welcome-BET365”
Evidence Summary
The domain a77c.xyz hosted a phishing site titled "welcome-BET365" that impersonated the Bet365 brand. This site posed a threat by attempting to deceive users into engaging with a fraudulent gambling platform, potentially leading to financial loss or credential theft.
Technical analysis reveals the domain was flagged by 21 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, Criminal IP, alphaMountain.ai, Cluster25, and CRDF. It was registered through Gname.com Pte. Ltd. on January 31, 2026, and resolved to IP address 45.196.247.27 (Hong Kong, AS140224 Nebula Global LLC). The site used nameservers A.SHARE-DNS.COM and B.SHARE-DNS.NET and had no SSL certificate.
The domain is currently offline, reducing immediate risk. However, its creation date and blocklist presence indicate a high likelihood of being used for active phishing campaigns. The risk level is elevated given the impersonation of a well-known brand and the absence of SSL, which increases user vulnerability.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260211-99A806- Captured page title
- welcome-BET365
- PDF artifact
- PDF evidence
Full evidence text
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | img.esportsdata.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | a77c.xyz |
malicious | Sinkholed |
| DNS4EU | a77c.xyz |
malicious | Sinkholed |
| Cloudflare DNS | a77c.xyz |
malicious | Sinkholed |
| OpenDNS | a77c.xyz |
phishing | Phishing Block |
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Detection timeline
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive