bet365k[.]app

bet365k.app was observed hosting a crypto‑gambling impersonation of the Bet365 brand. The site was registered on May 11 2025 and is currently taken offline. DNS resolution points to the IP address 34.96.219.82, which belongs to Google LLC (ASN 396982) and is geolocated in Hong Kong. The domain uses Cloudflare nameservers rocky.ns.cloudflare.com and tegan.ns.cloudflare.com, but no TLS certificate was presented during the last check, indicating an unencrypted HTTP service.

Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 / 100, Gridinsoft rates it 0 / 100, and the domain appears on at least one security blocklist. Google Safe Browsing flags the site for social engineering, and PhishDestroy has already blocked it. AlienVault OTX references the domain in 18 separate threat‑intel pulses, reinforcing its association with malicious activity. VirusTotal analysis shows that 17 of 95 scanned security vendors flagged the domain, further confirming its malicious nature.

The page title returned simply “bet365”, matching the targeted brand. While the exact content of the landing page was not captured, the available indicators collectively point to a high‑risk crypto gambling scam that leverages the Bet365 name to lure victims. Defenders should continue to block the domain at perimeter defenses, monitor for any re‑hosting attempts, and update detection signatures to include the observed IP address, Cloudflare name servers, and the identified threat‑intel references. Ongoing observation is recommended to confirm that the infrastructure remains offline and to detect any potential resurrection under a different domain.