p28d[.]top
“welcome-BET365”
Ringkasan bukti
This domain, p28d.top, is identified as a brand impersonation threat targeting Bet365, a well-known online betting platform. Analysis of the page title, 'welcome-BET365,' confirms the domain’s intent to deceive users by replicating the legitimate Bet365 interface. No evidence of a crypto drainer kit was observed, but the infrastructure is consistent with credential harvesting operations designed to capture login credentials and personal information from unsuspecting victims. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 154.39.104.132, hosted under AS18186 (Nebula Global LLC) in Hong Kong. The domain was registered on May 26, 2026, through NameMart Pte. Ltd., an uncommon registrar for legitimate betting services. VirusTotal detection metrics show 17 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by ZeroSSL GmbH under the ZeroSSL RSA DV SSL CA 2 intermediate authority, a common choice for low-cost or disposable certificates used in phishing campaigns. As of the latest assessment, p28d.top has been taken offline, reducing immediate exposure to end-users. However, the domain’s registration remains active until 2026, posing a residual risk of reactivation. Organizations and individuals are advised to monitor for similar domains registered through NameMart Pte. Ltd. or resolving to the same IP range. Users who may have interacted with this domain should reset credentials for Bet365 and enable multi-factor authentication on all sensitive accounts. Network defenders should update blocklists to include the domain and associated IP address to prevent potential re-emergence of this threat.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260601-D05A36- Artefak PDF
- Bukti PDF
Dasar hukum
Teks bukti lengkap
Acceptable Use Policy (AUP): The domain p28d.top is engaged in phishing activities, which directly contravenes the AUP by facilitating fraud and deception.
Terms of Service (TOS): The registrar reserves the right to suspend or terminate services for violations, and the use of this domain for illegal activities constitutes a clear violation of the TOS.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and the use of such access to commit fraud, which is applicable to phishing activities.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals via electronic communications, which includes phishing schemes.
Anti-Phishing Consumer Protection Act: This legislation aims to combat phishing by imposing penalties on those who engage in deceptive practices online.
Regulatory Note: Non-compliance with your AUP and TOS, as well as applicable laws, may expose your organization to legal liability and regulatory scrutiny. Immediate action is recommended to mitigate these risks.
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 10/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi
5 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of p28d.top · checked Jun 1, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive