pp11login[.]com

This domain, pp11login.com, is actively engaged in brand impersonation targeting Bet365, a well-known online gambling platform. The site presents itself as a legitimate login portal for Bet365, aiming to deceive users into entering credentials or financial information. As of the latest analysis, the domain remains operational and poses a significant risk to unsuspecting users. Analysis indicates that pp11login.com was created on September 13, 2025, and is registered through Cloud Yuqu LLC. The domain resolves to the IP address 153.43.171.50, hosted on infrastructure associated with AS13335 Cloudflare, Inc. in the United States. Security vendors have flagged this domain as malicious, with 11 out of 95 VirusTotal engines detecting it as a threat. Additionally, the domain appears on one security blocklist, further corroborating its malicious intent. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend an air of legitimacy to fraudulent sites. Current infrastructure and threat analysis confirm that pp11login.com remains active and continues to pose a high risk to users. Organizations and individuals are advised to block this domain at the network level and update endpoint protection rules to prevent access. Users who may have interacted with this domain should immediately change their Bet365 credentials and monitor accounts for unauthorized activity. Security teams should treat this domain as part of a broader campaign targeting online gambling platforms and adjust detection signatures accordingly.