bet420[.]cc

This domain, bet420.cc, is flagged as a brand impersonation threat specifically targeting Bet365, a well-known online betting platform. Analysis indicates the site replicates Bet365’s branding, including an identical page title, to deceive users into disclosing login credentials or financial details. No crypto drainer kit signatures were detected, but the infrastructure aligns with credential harvesting campaigns observed in similar fraudulent schemes.

Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on January 26, 2026, and resolves to the IP address 122.10.42.217, hosted in Hong Kong. Security vendor assessments on VirusTotal show 24 out of 95 engines flagging the domain as malicious. The SSL certificate is issued by Let’s Encrypt (R13), a common choice for both legitimate and fraudulent sites. The domain appears on one security blocklist and was proactively blocked by PhishDestroy, though no Google Safe Browsing (GSB) entries were recorded at the time of analysis.

As of the latest verification, bet420.cc has been taken offline, likely due to enforcement actions or hosting provider intervention. However, residual risk persists, as threat actors may re-deploy the same infrastructure under a new domain or IP. Organizations are advised to monitor for recurring patterns, such as Let’s Encrypt certificates paired with newly registered domains resolving to high-risk hosting providers. Users should verify domain authenticity before entering credentials, particularly when redirected from unsolicited communications.