b45060[.]com

This domain, b45060.com, has been identified as a brand impersonation phishing resource targeting Bet365, a well-known online gambling platform. The page title, "bet365英国上市官网," directly mimics the legitimate Bet365 brand, suggesting an intent to deceive users into believing the site is an official regional portal. No drainer kit signatures were observed, but the domain exhibits classic characteristics of credential harvesting infrastructure, likely designed to capture login credentials or financial details from unsuspecting victims.

Analysis indicates the domain was registered on July 13, 2023, through NameSilo, LLC, a registrar frequently associated with low-cost domain registrations used in phishing campaigns. It resolves to the IP address 206.119.83.71, hosted under AS140227 (Hong Kong Communications International Co., Limited). At the time of assessment, the domain was flagged by 20 out of 95 security vendors on VirusTotal, with detections spanning phishing, fraud, and malicious content categories. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB, further corroborating its malicious classification. No SSL certificate was present, which is atypical for legitimate financial or gambling platforms and increases the likelihood of interception during data transmission.

As of the latest verification, b45060.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the infrastructure remains a residual risk, as threat actors may re-deploy the domain or migrate to similar registrations under the same registrar or hosting provider. Organizations and end-users are advised to maintain blocklist updates, monitor for newly registered domains under high-risk registrars, and implement multi-factor authentication to mitigate credential theft risks. Continuous vigilance is recommended, as brand impersonation campaigns often exhibit rapid domain turnover and reuse of hosting infrastructure.