games98bet[.]com

Analysis of games98bet.com indicates a high-risk brand impersonation domain targeting Google, currently active as of July 12, 2026. The domain was registered on October 31, 2025, through Dominet (HK) Limited and resolves to IP address 188.114.96.3, which is associated with Cloudflare infrastructure. The SSL certificate is issued by Google Trust Services, a detail often exploited in phishing operations to create a false sense of legitimacy. The page title, '98bet - Experimente jogos emocionantes e apostas online em um só lugar,' suggests the site is presenting itself as an online gambling platform, though no direct evidence confirms it is explicitly mimicking Google’s branding beyond the stated brand target in threat intelligence. Security vendors have flagged the domain, with 4 of 95 engines on VirusTotal detecting it as malicious. It appears on two security blocklists, including PhishDestroy and BLP-Malware, and holds a Gridinsoft trust score of 0/100. AlienVault OTX records the domain in 23 threat intelligence pulses, further corroborating its association with malicious activity. Detected technologies include Google Analytics and HTTP/3, which are commonly used in both legitimate and fraudulent sites to track user behavior or enhance performance. While the domain’s infrastructure and security flags strongly suggest malicious intent, the exact nature of the threat remains partially unclear due to limited visibility into its operational mechanics. Defenders should treat this domain as high-risk, block it at the network level, and monitor for any connections or redirects involving it. Further investigation into associated IP ranges, SSL certificate usage, and any linked domains may provide additional context for mitigation efforts.