g13b[.]top

Analysis of the domain g13b.top indicates active brand impersonation targeting Bet365, a well-known online betting platform. The domain was registered on May 18, 2026, through NameMart Pte. Ltd. and currently resolves to the IP address 103.27.177.164. The page title, 'welcome-BET365,' explicitly suggests an attempt to mimic the Bet365 brand, aligning with the classification of brand_impersonation. As of July 18, 2026, the domain remains active and is flagged by at least one security blocklist, specifically OpenPhish. Security vendor detection data from VirusTotal shows that 13 out of 95 engines have identified the domain as malicious. While this does not constitute a definitive verdict, the detection count and blocklist inclusion provide evidence of suspicious activity. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains, offering no conclusive indication of intent on its own. Infrastructure analysis reveals no additional details about the hosting provider or autonomous system number (ASN), limiting further attribution. Defenders are advised to treat this domain as high-risk due to its association with brand impersonation, active status, and existing security flags. Organizations should consider blocking access to g13b.top and monitoring for related indicators of compromise, such as the resolving IP address 103.27.177.164. Further investigation into the domain's content and network behavior is recommended to confirm the exact nature of the threat.