5678016[.]com

Analysis of the domain 5678016.com indicates it is actively involved in brand impersonation targeting Google, despite displaying content related to Bet365 sports betting. The domain was registered on March 21, 2025, through InterNetX GmbH and currently resolves to the IP address 165.84.198.223. Security vendors have flagged this domain, with 18 out of 95 on VirusTotal identifying it as malicious. Additionally, it appears on three security blocklists, including PhishDestroy, PhishingDB, and BLP-Malware, further supporting its classification as a high-risk threat. The page title, Bet365体育, suggests the site is presenting itself as a sports betting platform, though the exact nature of its content remains unverified beyond this detail. The domain is linked to 50 threat intelligence pulses on AlienVault OTX, indicating its presence in multiple cyber threat discussions. Trust scores from Scamadviser and Gridinsoft are both critically low, at 1/100 and 0/100 respectively, reinforcing suspicions of fraudulent activity. The SSL certificate is issued by Let’s Encrypt, which, while common for legitimate sites, is frequently exploited by malicious actors to lend a false sense of security. What remains uncertain is the precise mechanism of the scam, as the domain’s content has not been fully analyzed. The discrepancy between the brand impersonation of Google and the Bet365-themed page title may indicate a multi-stage operation or a misdirection tactic. Defenders should treat this domain as hostile infrastructure and consider blocking access at the network level. Monitoring for related domains registered through the same provider or resolving to the same IP address may help identify additional threats in this campaign. Given the domain’s active status and high-risk indicators, users should avoid interaction with it entirely.