t67x[.]top

This domain is flagged as a high-risk brand impersonation threat targeting Bet365, a well-known online gambling platform. The specific threat type involves fraudulent credential harvesting and financial fraud, leveraging the trusted Bet365 brand to deceive users into entering sensitive account details or depositing funds into attacker-controlled accounts. The page title 'welcome-BET365' explicitly confirms the impersonation intent, while the lack of SSL encryption further increases the risk of data interception during transmission. Analysis indicates the domain t67x.top resolves to IP address 154.39.104.128, hosted in Hong Kong under AS18186 (Nebula Global LLC). VirusTotal detection rates show 16 out of 95 security vendors flagging the domain as malicious. The domain was registered on May 11, 2026, through NameMart Pte. Ltd., and currently appears on one security blocklist. Infrastructure analysis reveals no SSL certificate, and the domain remains active despite being blocked by at least one security provider. The creation date discrepancy (2026) suggests potential WHOIS manipulation or typo-squatting tactics. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its resolving IP (154.39.104.128) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) across endpoint detection systems, focusing on the domain, IP, and associated AS number. User awareness training should emphasize verifying SSL certificates and official domain names before entering credentials. Financial transaction monitoring should be heightened for any activity linked to this domain or its infrastructure, particularly for organizations in the gambling or financial sectors. Network logs should be reviewed for historical connections to 154.39.104.128 or t67x.top to identify potential prior compromises.