bfbet[.]app

Analysis of bfbet.app indicates a confirmed crypto-gambling scam domain impersonating the Bet365 brand. The domain, registered on December 1, 2025, through Dynadot LLC, currently resolves to IP 118.107.248.72, hosted on AS132825 (MYTEK TRADING PTY LTD) in Hong Kong. Infrastructure checks reveal no SSL certificate, a critical security gap that exposes user data to interception. The page title explicitly displays 'bet365', aligning with the reported brand impersonation threat type.

Security vendor assessments further substantiate the malicious classification. Scamadviser assigns a trust score of 1/100, while Gridinsoft rates it 0/100. AlienVault OTX records the domain in four threat intelligence pulses, and PhishDestroy has blocked it. Eighteen of 95 security vendors on VirusTotal flag the domain as malicious, though the absence of additional context limits attribution to specific malware families or phishing kits.

The domain is presently offline, but its infrastructure remains intact. Defenders should treat bfbet.app as an active threat vector, particularly for users searching for Bet365-related gambling services. Monitoring for re-emergence under the same IP or hosting provider is recommended, alongside blocking the domain and its resolved IP at network and endpoint levels. No evidence of widespread distribution campaigns or associated malware payloads is currently available, but the combination of brand impersonation, crypto-gambling classification, and low trust scores justifies elevated risk categorization.