bet73kk[.]com

This domain, bet73kk.com, is flagged as a brand_impersonation threat targeting Bet365, a globally recognized online gambling platform. The site presents itself as an official Bet365 portal, as evidenced by the page title '365英国上市官网,' which translates to '365 UK Listed Official Website.' Analysis indicates the domain is designed to deceive users into believing they are accessing a legitimate Bet365 platform, likely for credential harvesting or financial fraud. No specific drainer kit signatures have been confirmed, but the impersonation tactics align with common phishing methodologies in the gambling sector. Infrastructure analysis reveals the domain was registered on March 27, 2020, through NameSilo, LLC, a registrar frequently associated with malicious domains. It resolves to the IP address 216.118.239.164, hosted under AS45753 (Netsec Limited) in Hong Kong. The domain is flagged by 19 out of 95 security vendors on VirusTotal, and it appears on two distinct security blocklists. The SSL certificate is issued by Google Trust Services (WE1), which, while not inherently malicious, is often leveraged by threat actors to lend a veneer of legitimacy. No detections from Google Safe Browsing (GSB) are recorded at this time. As of the latest assessment, bet73kk.com has been taken offline, likely in response to security vendor reports and blocklist inclusions. However, the elevated risk persists due to the domain's historical activity and the potential for re-registration or migration to alternative infrastructure. Organizations and users are advised to monitor for similar impersonation domains, particularly those mimicking gambling platforms, and to implement DNS-based blocking for known malicious IPs and domains. End-users should verify the authenticity of gambling sites by cross-referencing official domains and avoiding links from unsolicited communications.