zh-welcome-1xbet[.]com

Analysis of zh-welcome-1xbet.com shows that the domain was registered on 10 June 2025 through the InterNetX GmbH registrar. Google Safe Browsing classifies the site as delivering unwanted software, and the domain appears on at least one public security blocklist. PhishDestroy has also listed the domain as blocked, indicating active mitigation by that service.

VirusTotal reports that 18 of 91 scanned security vendors flag the domain, providing a mixed but notable detection rate that aligns with its high‑risk classification. The domain is currently marked as active and associated with generic phishing activity, suggesting it is being used to lure victims, likely by impersonating legitimate services, although the exact payload or lure has not been disclosed. Infrastructure details such as the hosting IP address, autonomous system number, geographic location, SSL certificate status, and HTTP response codes are not publicly available in the supplied intelligence, limiting a full network‑level assessment.

Similarly, the page title and any observed brand targeting have not been released, leaving the specific social‑engineering vector uncertain. Defenders should prioritize blocking zh-welcome-1xbet.com at perimeter filters, update endpoint protection signatures to reflect the 18 vendor detections, and monitor for any related phishing campaigns targeting users of the 1xbet brand. Continuous re‑evaluation is advised, as additional indicators such as hosting changes or new vendor detections may emerge.