9374[.]ee

This domain, 9374.ee, is identified as a brand impersonation phishing site specifically targeting Bet365, a well-known online gambling platform. The fraudulent page displays the title 'Bet365-9558.com,' attempting to deceive users into believing they are interacting with a legitimate Bet365 portal. No direct evidence of a drainer kit has been confirmed, though the impersonation tactics suggest credential harvesting or financial fraud as the primary objective. Infrastructure analysis reveals the domain was registered on February 21, 2026, an anomalous future date likely indicative of falsified registration data. It resolves to the IP address 77.83.240.177, hosted under AS49870 (Alsycon B.V.) in the Netherlands. The domain is flagged by 16 out of 95 security vendors on VirusTotal, with detection engines classifying it as malicious. It appears on two independent security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by ZeroSSL RSA Domain Secure Site CA, a common choice for low-effort phishing infrastructure due to its accessibility and lack of rigorous validation. As of the latest assessment, 9374.ee has been taken offline, reducing immediate exposure risk. However, the domain registration remains active, and the hosting infrastructure may be repurposed for future campaigns. Users who accessed the site prior to its takedown should assume credential exposure and initiate account remediation, including password resets and multi-factor authentication reviews. Organizations monitoring similar threats are advised to block the IP 77.83.240.177 and monitor for newly registered domains under the same registrar or ASN.