q365[.]vip

This domain is classified as an elevated-risk brand impersonation threat specifically targeting Bet365, a well-known online gambling platform. Analysis indicates the site was designed to deceive users into believing they were interacting with the legitimate Bet365 service, as evidenced by the page title 'bet365' and confirmed brand impersonation classifications in threat intelligence feeds. Infrastructure analysis reveals the domain q365.vip was registered on May 17, 2016, through Name.com, Inc. and currently resolves to the IP address 52.175.17.154. Security vendor detections on VirusTotal report 14 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist, and AlienVault OTX records it in two distinct threat intelligence pulses. The SSL certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36 hierarchy, though this does not mitigate the underlying impersonation risk. The domain has since been taken offline, but historical resolution data and detection metrics confirm its prior malicious activity. Users who may have interacted with q365.vip should immediately revoke any active sessions associated with the domain, particularly those involving financial transactions or login credentials. Given the brand impersonation nature of this threat, affected individuals are advised to monitor their accounts for unauthorized activity and enable multi-factor authentication on all related services. Organizations should update their security blocklists to include this domain and its associated IP address to prevent future access attempts. Security teams are encouraged to review logs for connections to 52.175.17.154 and correlate with any anomalous authentication events tied to Bet365 or similar gambling platforms.