v03k[.]xyz

Analysis of the domain v03k.xyz indicates it is a fraudulent gambling site impersonating Bet365, classified as a crypto gambling scam. The domain was registered on June 13, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals it resolves to the IP address 45.196.247.145, hosted on AS140224 (Nebula Global LLC) in Hong Kong, an autonomous system commonly linked to malicious activity. The domain's nameservers (ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, ns4.1111343.com) further suggest involvement in coordinated phishing or scam operations, as these nameservers are recurrently observed in similar threat campaigns.

Security vendor detections confirm elevated risk: 11 of 95 engines on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist (PhishDestroy). AlienVault OTX records show the domain in 15 threat intelligence pulses, indicating active tracking by security researchers. The page title, 'welcome-BET365,' directly aligns with the brand impersonation of Bet365, a well-known gambling platform, reinforcing the scam classification. No SSL certificate was detected, a common red flag for fraudulent sites, as legitimate gambling platforms typically enforce HTTPS for user security.

The domain is currently offline, which may result from takedown efforts or operational changes by the threat actors. However, defenders should treat this domain as high-risk due to its infrastructure, detection history, and association with crypto gambling fraud. Organizations are advised to block the domain and its resolving IP at the network level, monitor for related domains registered through the same registrar or hosted on the same ASN, and alert users to the Bet365 impersonation scam. Given the domain's presence in multiple threat intelligence feeds, further investigation into affiliated infrastructure (e.g.