bet8892[.]com

The domain bet8892.com has been identified as a brand impersonation threat specifically targeting Bet365, a well-known online gambling platform. Analysis confirms the domain was designed to deceive users by presenting itself as an official Bet365 portal, with the page title "Bet365 | Là nơi sinh sống của hơn 20 triệu game thủ" reinforcing the fraudulent branding. The domain is currently offline, though prior activity suggests it was actively used for malicious purposes. Technical indicators reveal the domain was registered on April 08, 2026, through GoDaddy.com, LLC, and resolved to the IP address 103.172.111.58, hosted by Dream Cloud Innovation Pte. LTD in Singapore. VirusTotal detections show 14 of 95 security vendors flagged the domain as malicious, while it appears on one security blocklist, specifically PhishDestroy. The SSL certificate was issued by Let's Encrypt (R13), a common tactic to lend superficial legitimacy to fraudulent sites. Infrastructure analysis indicates the domain was likely part of a broader campaign to harvest user credentials or financial information under the guise of a trusted brand. Current status confirms bet8892.com has been taken offline, though the infrastructure remains a potential risk for future abuse. Organizations and users are advised to block the domain and its associated IP (103.172.111.58) at the network level. Security teams should monitor for similar impersonation attempts, particularly domains mimicking Bet365 with Vietnamese-language content or unusual registration dates. End-users should verify domain authenticity via official Bet365 channels before engaging with any betting-related sites. Proactive measures include deploying indicators of compromise (IOCs) in endpoint detection systems and educating users on recognizing brand impersonation tactics.