11ysb8[.]com

The domain 11ysb8.com was registered on February 21 2026 via Hello Internet Corp. DNS resolves to 34.96.219.82, an address located in Hong Kong and announced by AS396982 (Google LLC). The host presents an SSL certificate identified as R12 and returns HTTP 200 responses. The site’s page title is “bet365”, indicating a gambling‑related landing page, while the threat profile lists Adobe as the impersonated brand. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows 17 of 93 scanners flag the domain, and Gridinsoft assigns a trust score of 0 out of 100. AlienVault OTX references the domain in a single threat pulse. Nameservers are monika.ns.cloudflare.com and trevor.ns.cloudflare.com, confirming use of Cloudflare’s DNS service. The observable indicators suggest a high‑risk, active brand‑impersonation campaign that leverages a gambling façade to lure victims. Current intelligence does not reveal the specific payload or credential‑capture mechanisms employed, and the exact phishing kit remains unidentified. Defenders should block the domain at perimeter and DNS layers, monitor for traffic to the associated IP address, and include the domain and its IP in threat intelligence feeds. Ongoing observation is advised to capture any evolved content or additional infrastructure linked to this campaign.