86365kk[.]com

This domain, 86365kk.com, is actively impersonating Bet365 as part of a confirmed phishing operation targeting users of the legitimate betting platform. Registered on October 23, 2020, through Name.com, Inc., the domain currently resolves to the IP address 27.124.41.89 and displays a page title matching the targeted brand, 'BET365.' Analysis indicates the site remains operational despite being flagged by multiple security vendors and threat intelligence platforms, suggesting persistent malicious intent. Evidence from threat intelligence sources confirms the domain's involvement in phishing activity. It appears on two security blocklists and is flagged by 20 out of 95 security vendors on VirusTotal, indicating broad detection as malicious. Additionally, AlienVault OTX lists the domain in 14 threat intelligence pulses, further corroborating its association with phishing campaigns. The Gridinsoft trust score of 0/100 reinforces the high-risk classification, though specific details about the phishing kit or infrastructure remain undisclosed. Defenders should treat this domain as an active threat to Bet365 users. The domain's age and continued resolution to an active IP suggest it may be part of a long-running campaign, though the exact tactics used to lure victims—such as email, SMS, or malvertising—are not specified in available intelligence. Organizations should block the domain and its associated IP at the network level, monitor for any attempts to access it from internal systems, and alert users to the risk of brand impersonation. Given the domain's persistence, additional monitoring for related infrastructure or newly registered lookalike domains is recommended.