bet365-lisbon[.]com

The domain bet365-lisbon.com was registered on September 05, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IP address 188.114.96.3. DNS resolution is served by the Cloudflare nameservers angela.ns.cloudflare.com and mitch.ns.cloudflare.com, indicating that the infrastructure is protected by Cloudflare’s edge network. Technical fingerprinting shows the presence of Cloudflare Browser Insights and HTTP/3 support, confirming that traffic is being terminated at Cloudflare’s edge. The site presents a TLS certificate issued by Google Trust Services, which is a legitimate certificate authority and does not, by itself, mitigate the malicious nature of the domain.

Threat‑intelligence feeds have classified bet365-lisbon.com as a high‑risk, generic phishing vector. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, suggesting that at least one anti‑phishing service has identified malicious activity associated with the host. VirusTotal has recorded detections from 14 of 91 scanned security vendors, reinforcing the suspicion that the domain is being used for phishing or related abuse. No public page title or content analysis is available, so the exact lure or credential‑harvesting technique employed by the site remains unknown.

Given the active status, the presence on a blocklist, and multiple vendor detections, defenders should treat traffic to bet365-lisbon.com as malicious. Recommended mitigation steps include adding the domain to network‑level deny lists, configuring web‑proxy or firewall rules to block HTTP/HTTPS requests to the host, and monitoring DNS logs for queries to the domain. Continuous re‑evaluation is advised, as additional intelligence—such as page content, phishing kit signatures, or further vendor detections—may emerge and refine the threat profile.