bet365h7[.]net
“bet365-上网导航”
bet365h7.net — Contenuto non disponibile. Simulazione del marchio: Bet365; Tipo di truffa: Crypto Gambling. Riepilogo delle prove: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Registrar: Dynadot.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of the domain bet365h7.net indicates it was actively impersonating the Bet365 brand as part of a crypto gambling scam. The domain, registered on September 20, 2025, through Dynadot LLC, resolved to 172.67.202.25 (AS13335 Cloudflare, Inc., US) and used Cloudflare nameservers rocky.ns.cloudflare.com and tegan.ns.cloudflare.com. No SSL certificate was present. The page title, 'bet365-上网导航,' suggests a Chinese-language interface targeting Bet365 users, though the exact content and functionality remain unconfirmed due to the domain's offline status as of July 23, 2026. Detection data reveals elevated risk: Scamadviser assigned a trust score of 1/100, and the domain appeared in 17 AlienVault OTX threat intelligence pulses.
Fourteen of the security vendors scanning the domain on VirusTotal flagged it as malicious. It was blocked by PhishDestroy and listed on one additional security blocklist. The domain's infrastructure, including Cloudflare hosting, aligns with common phishing and scam operations, though no specific phishing kit or additional technical artifacts have been publicly documented. Defenders should treat this domain as confirmed malicious infrastructure.
Blocklist the domain and its resolved IP at perimeter security controls. Investigate logs for connections to 172.67.202.25 or the domain name, particularly from users who may have interacted with gambling or crypto-related content. Given the domain's offline status, further forensic analysis may be limited, but historical DNS and WHOIS records should be preserved for potential incident response. No evidence suggests this domain is part of a broader campaign, but defenders should monitor for related domains registered through Dynadot or using similar Cloudflare-hosted infrastructure.
Indicatori di sicurezza
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analisi di VirusTotal
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo