bet365h1[.]cc

This domain bet365h1.cc is identified as a brand impersonation infrastructure targeting Bet365, designed to present a counterfeit login or betting interface under the legitimate brand identity. The page title “bet365” indicates direct visual and naming spoofing intended to mislead users into trusting the site. The current status is offline, indicating the infrastructure has been taken down following detection and reporting.

Technical indicators confirm malicious classification. The domain was flagged by 18 of 95 VirusTotal security vendors and appears on 1 security blocklist. It was registered through Dynadot LLC and created on September 20, 2025. The domain resolves to IP 34.96.219.82, geolocated to HK under AS396982 (Google LLC infrastructure). Google Safe Browsing explicitly flags the domain as phishing, and it has been blocked by PhishDestroy. SSL certificate is absent, increasing interception and impersonation risk.

Users who interacted with bet365h1.cc should assume potential credential compromise. Any reused passwords should be changed immediately, and accounts linked to the impersonated brand should be reviewed for unauthorized activity. If credentials were entered, enable multi-factor authentication and monitor financial or account changes. Security teams should retain domain and IP indicators for blocking, and monitor for derivative domains using similar naming patterns, as this infrastructure shows typical short-lived impersonation behavior.