bet6612[.]com

Analysis of the domain bet6612.com indicates active brand impersonation targeting Bet365, a recognized online betting platform. The domain was registered on November 24, 2022, through Name.com, Inc., and currently resolves to the IP address 103.194.105.22, hosted under AS138995 (Antbox Networks Limited) in Hong Kong. The page title 'welcome-bet365' explicitly suggests an attempt to mimic the Bet365 brand, aligning with the classified scam type of brand impersonation. Infrastructure analysis reveals the use of technologies including Ant Design, Nginx, Vue.js, OpenResty, HSTS, Google Analytics, GeeTest, and Cloudflare, which are consistent with modern web applications but do not inherently confirm malicious intent. The domain is currently returning an HTTP 403 status, which may indicate restricted access or defensive measures against automated scanning. A Let's Encrypt SSL certificate (R12) is present, providing encrypted connections but offering no assurance of legitimacy. Detection metrics from security vendors show that 21 out of 91 engines flagged the domain as malicious, while it appears on at least one security blocklist. The domain has also been referenced in two threat intelligence pulses on AlienVault OTX, further corroborating its association with malicious activity. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk classification. Defenders are advised to treat this domain as actively malicious and prioritize blocking or monitoring its resolution within networks. The combination of brand impersonation, detection by multiple security vendors, and inclusion in threat intelligence feeds justifies immediate mitigation. Further investigation into associated infrastructure, such as the hosting provider and SSL certificate issuance patterns, may reveal additional linked domains or campaigns.