2276987365[.]com

The domain 2276987365.com is identified as a high-risk threat engaging in brand impersonation, specifically targeting the Bet365 brand. This domain does not utilize any known crypto drainer kits, but it is designed to deceive users into believing they are interacting with legitimate Bet365 services.

Infrastructure analysis reveals that 2276987365.com has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the security community. The domain is registered through DYNADOT LLC and resolves to the IP address 103.226.153.55. It was created on March 28, 2024. The domain is currently listed on one security blocklist, and its SSL certificate is issued by Default Company Ltd. The page title, 'bet365最快线路检测中心', further suggests an attempt to mimic Bet365's legitimate content.

As of the latest assessment, the domain remains active, posing a continued risk to unsuspecting users. Response actions should include blocking the domain at the network level and educating users about the importance of verifying the authenticity of websites they visit. Given the current status and the number of security vendors flagging the domain, there is a high remaining risk of users falling victim to this impersonation campaign.