bet63vvv[.]com

Analysis of bet63vvv.com indicates a confirmed brand-impersonation phishing domain targeting Bet365, a recognized gambling platform. The domain was registered on June 3, 2024, through NameSilo, LLC, and is currently offline as of the report date. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers mario.ns.cloudflare.com and melina.ns.cloudflare.com, resolving to IP 172.67.162.134 located in the US. No SSL certificate is present, which is atypical for legitimate gambling sites and may serve as a detection indicator.

The page title, '365英国上市官网,' directly references Bet365, reinforcing the brand-impersonation classification. The domain appears on one security blocklist (PhishDestroy) and is flagged by 13 of 95 security vendors on VirusTotal, though the absence of an SSL certificate may limit detection coverage. AlienVault OTX records the domain in four threat intelligence pulses, suggesting prior tracking by defenders. Scamadviser and Gridinsoft both assign a trust score of 1/100 and 0/100, respectively, further supporting its malicious classification.

Defenders should prioritize blocking this domain at the DNS and proxy levels, particularly in environments where gambling or financial transactions occur. The use of Cloudflare nameservers and hosting is consistent with phishing infrastructure observed in similar campaigns, though attribution to a specific threat actor remains unconfirmed. While the domain is currently offline, historical resolution data should be preserved for retrospective analysis. Additional monitoring of related domains registered through NameSilo or using Cloudflare infrastructure may identify linked phishing activity.