w86365[.]cc

Analysis of the domain w86365.cc indicates active brand impersonation targeting Bet365, a well-known online betting platform. The domain was registered on November 6, 2021, through Name.com, Inc., and remains operational as of July 12, 2026. Infrastructure analysis reveals resolution to the IP address 103.255.47.25, hosted in Hong Kong under AS135357 (HONG KONG KOWLOON TELECOMMUNICATIONS CO., LIMITED). The domain utilizes Cloudflare nameservers (daniella.ns.cloudflare.com and tate.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. Technical indicators further support the classification of this domain as malicious. The SSL certificate is issued to 'Default Company Ltd,' a generic placeholder often associated with fraudulent or low-effort deployments. The page title explicitly displays 'BET365,' aligning with the reported brand impersonation scam type. Detection engines have flagged the domain, with 20 of 91 security vendors on VirusTotal identifying it as malicious. Additionally, the domain appears in one AlienVault OTX threat intelligence pulse and is listed on one security blocklist, including PhishDestroy. The HTTP status code 302 suggests redirection activity, though the destination remains unconfirmed in this analysis. Defenders should treat this domain as high-risk due to its prolonged activity, brand-specific targeting, and multiple detection flags. The use of Cloudflare nameservers and a generic SSL certificate further complicates attribution but does not diminish the threat. Organizations are advised to block the domain and its resolving IP at the network level, monitor for related infrastructure, and alert users to the impersonation risk. The exact content and redirection behavior of the site have not been analyzed, so additional phishing kit or payload details are not available at this time.