bet9667[.]com

The domain bet9667.com is currently active and has been identified as a credential‑harvesting phishing site. Registration data shows the domain was registered through NameSilo, LLC, and it is served by the Alibaba Cloud DNS name servers ns7.alidns.com and ns8.alidns.com. HTTP probing returns a 307 redirect response, indicating that the site may be forwarding visitors to a malicious payload or login page, a common tactic for phishing operations.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing platform has taken mitigation action. VirusTotal analysis reports that 15 of 91 scanned security vendors flag the domain as malicious, providing multi‑vendor consensus that the site is likely involved in phishing activity. No additional evidence such as Safe Browsing alerts, OTX entries, IP geolocation, SSL certificate details, or page title information has been disclosed, leaving those aspects of the infrastructure unverified at this time.

Defenders should immediately add bet9667.com to internal blocklists, enforce URL filtering rules to prevent user access, and monitor outbound traffic for any connections to the domain’s IP addresses once resolved. Given the active status and the observed vendor detections, continuous monitoring of the domain’s DNS resolution and any emergent threat intelligence feeds is advised. Organizations should also educate end‑users about the risk of credential‑harvesting attempts and encourage reporting of any unexpected login prompts that reference the domain.