a73o[.]xyz
“welcome-BET365”
Kanıt özeti
Analysis of the domain a73o.xyz indicates it was actively involved in brand impersonation targeting Bet365, a known gambling platform, with a focus on crypto-related scams. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd. and resolved to the IP address 45.119.97.37, hosted under AS133861 (SonderCloud Limited) in the United States. No SSL certificate was detected, increasing the likelihood of insecure data transmission. The page title, 'welcome-BET365,' explicitly confirms the intent to impersonate Bet365, aligning with the scam type classified as crypto gambling.
Infrastructure analysis reveals the domain was flagged by 16 of 93 security vendors on VirusTotal, though this does not represent exhaustive detection coverage. It appeared on a single security blocklist (PhishDestroy) and was included in one AlienVault OTX threat intelligence pulse, suggesting limited but confirmed malicious activity. The domain's nameservers (ns1.1111343.com, ns1.dnsbm.com, ns2.1111343.com, ns2.dnsbm.com, ns3.1111343.com, and ns4) are consistent with patterns observed in other phishing infrastructure, though no direct attribution to a specific threat actor or campaign is available. As of July 24, 2026, the domain is offline, reducing immediate risk to end users.
However, defenders should monitor for re-activation or migration to similar domains. Organizations are advised to block the domain and its associated IP (45.119.97.37) at the network level, update endpoint protection rules, and alert users to the Bet365 impersonation scam. Further investigation into the hosting provider (SonderCloud Limited) and registrar (Gname.com Pte. Ltd.) may reveal additional linked infrastructure. The absence of an SSL certificate and the domain's short lifespan (less than six months) are consistent with disposable phishing operations.
Gönderilen kanıt anlık görüntüsü
- Gönderildi
- Kayıt defteri kayıtları
- 1
- Vaka kimliği
PD-20260126-DFAED8- PDF belgesi
- PDF kanıtı
Kanıtın tam metni
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | a73m.xyz |
malicious | Sinkholed |
| Cloudflare DNS | a73m.xyz |
malicious | Sinkholed |
| OpenDNS | a73m.xyz |
phishing | Phishing Block |
| DNS4EU | a73m.xyz |
malicious | Sinkholed |
| DNS4EU | ssl.gfw301.top |
malicious | Sinkholed |
| Cloudflare DNS | a73o.xyz |
malicious | Sinkholed |
| OpenDNS | a73o.xyz |
phishing | Phishing Block |
| DigiCert UltraDNS | a73o.xyz |
malicious | Sinkholed |
| Hagezi Threat Feed | a73o.xyz |
malicious | Sinkholed |
| DNS4EU | a73o.xyz |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Engelleme listesi kapsamı
10 izlenen harici kaynak · kayıtlı anlık görüntü 13.08.2026
Tespit zaman çizelgesi
-
Cloudflare Radar
Cloudflare Radar taraması kaydedildi · Taramayı aç
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, TLS adları ve zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
VirusTotal Analizi
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin