bet365h7[.]cc

On 23 July 2026 the domain bet365h7.cc was observed hosting a crypto‑gambling impersonation of the Bet365 brand. The site presented the page title “bet365”, matching the targeted brand, and was registered through Dynadot LLC on 20 September 2025. DNS resolution points to 34.96.219.82, an address located in Hong Kong and assigned to AS396982 (Google LLC). The domain is served by Cloudflare name servers rocky.ns.cloudflare.com and tegan.ns.cloudflare.com, but no TLS certificate was presented, indicating HTTP‑only access. Reputation services flag the domain as highly suspicious: Scamadviser assigns a trust score of 1 / 100, Google Safe Browsing classifies it as social engineering, and it appears on one external blocklist.

VirusTotal reports that 16 of 95 scanned security vendors flagged the domain, confirming malicious activity. PhishDestroy has already blocked the domain, and AlienVault OTX lists it in three separate threat‑intel pulses. The site’s declared scam type is “Crypto Gambling”, aligning with the brand impersonation. The domain is currently offline, but the infrastructure—Google‑hosted IP, Cloudflare DNS, and a recent registration—suggests a reusable pattern for future impersonation attempts.

Defenders should add the IP address 34.96.219.82 and the domain bet365h7.cc to network‑level deny lists, monitor for any re‑registration of similar domains, and enforce strict outbound filtering for traffic to unknown hosts presenting Bet365‑related URLs. Continuous monitoring of the associated Cloudflare name servers and the Dynadoc registrar for new registrations can help pre‑empt repeat campaigns. Because no SSL certificate is present, any future activation will likely rely on clear‑text HTTP, which can be detected by proxy inspection. Organizations should also educate users about the risk of unsolicited crypto‑gambling invitations that reference the Bet365 brand.