1900892[.]cc

Analysis of 1900892.cc, a domain created on September 23, 2025 and currently taken offline, indicates a targeted impersonation of the Bet365 brand. The site resolved to the IPv4 address 122.10.20.121, which is allocated to AS134548 (DXTL Tseung Kwan O Service) in Hong Kong. DNS resolution was provided by ns1.dnsip.com and ns2.dnsip.com, and the TLS certificate presented was issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, confirming the registrar as GoDaddy.com, LLC. The page title returned by the HTTP response was the plain string "bet365," matching the declared brand target. Security telemetry shows the domain appears on a single blocklist and is specifically listed as blocked by PhishDestroy.

AlienVault OTX registers the domain in sixteen distinct threat‑intelligence pulses, reflecting repeated observations across the community. VirusTotal scans recorded sixteen of ninety‑five antivirus and URL‑reputation engines flagging the domain as malicious, reinforcing the confidence of a malicious payload or behavior. Independent reputation scoring from Scamadviser assigns a trust score of 1 out of 100, underscoring the high likelihood of fraud.

The listed scam type is "Crypto Gambling," suggesting the site attempted to lure victims into a cryptocurrency‑based gambling scheme under the guise of Bet365. Defensive recommendations include adding 1900892.cc and its resolving IP 122.10.20.121 to deny‑list controls, monitoring for re‑registration attempts, and extending detection rules to cover similar naming patterns and the identified SSL issuer. Continuous observation of the associated ASN and any future activity tied to the DNS providers ns1.dnsip.com / ns2.dnsip.com is advised to pre‑empt potential re‑use of the infrastructure for brand‑impersonation campaigns.