365w[.]bet

Analysis of the domain 365w.bet indicates a high‑risk brand‑impersonation campaign targeting Bet365 users. The site resolves to the IP address 34.96.219.82, which belongs to AS396982 Google LLC and is geolocated in Hong Kong. Infrastructure inspection shows the domain was registered through Cloudflare, Inc., and utilizes the Cloudflare authoritative nameservers rocky.ns.cloudflare.com and tegan.ns.cloudflare.com. No TLS certificate is present, implying the site operates without HTTPS protection. The HTTP response returned a page title of "bet365," matching the advertised brand and confirming the intent to masquerade as the legitimate Bet365 service.

Multiple defensive feeds have flagged the domain. Google Safe Browsing categorises it as a social engineering threat, and PhishDestroy has actively blocked access to the site. VirusTotal records show that 16 of 95 scanning engines have raised detections, reflecting a consensus of malicious behavior. AlienVault OTX references the domain in 17 independent threat‑intel pulses, reinforcing its reputation as a repeat offender. The domain appears on one external security blocklist, and Scamadviser assigns a trust score of 1 out of 100, underscoring its lack of legitimacy.

The campaign is labelled as a "Crypto Gambling" scam, suggesting that victims may be lured into fraudulent cryptocurrency wagering activities under the guise of Bet365. Because the site is currently offline, content inspection is limited to the observed page title and metadata; no additional payload or phishing form details are available. Defenders should therefore treat the domain as malicious, enforce blocking at DNS and proxy layers, and consider adding the associated IP address to network‑wide deny lists. Continuous monitoring of Cloudflare name server changes is advised, as the operator could redeploy the domain on new infrastructure.