1line[.]bet

This domain, 1line.bet, is actively impersonating Linea, a known brand, as indicated by its classification as a brand_impersonation threat. Registered on May 15, 2020, the domain resolves to the IP address 188.114.96.3 and is currently flagged by multiple security sources, including PhishDestroy and BLP-Malware. It appears on two security blocklists and has been referenced in 24 threat intelligence pulses on AlienVault OTX, suggesting persistent malicious activity. The domain's SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, and it holds a trust score of 1/100 from Scamadviser and Gridinsoft, further indicating its high-risk status. Analysis of available data shows that 13 out of 95 security vendors on VirusTotal have flagged this domain, reinforcing its classification as a high-risk site. The page title, '1line.bet,' aligns with the domain name but does not provide additional context about the specific nature of the scam beyond brand impersonation. The domain's infrastructure, including its registration through Web Commerce Communications Limited, does not present immediate anomalies but is consistent with other known malicious domains. Defenders should treat this domain as an active threat. Immediate actions include blocking the domain and its associated IP address (188.114.96.3) at the network level, monitoring for any attempts to access it within their environments, and alerting users to the risk of brand impersonation. Given its long-standing registration and continued activity, this domain may be part of a broader campaign, and further investigation into related infrastructure is recommended.