365betdengru[.]com

This domain, 365betdengru.com, is flagged as an active gambling scam phishing site based on technical indicators and security vendor detections. Registered on March 3, 2026, through Dynadot LLC, the domain resolves to the IP address 20.255.104.129, hosted under AS8075 (Microsoft Corporation) in Hong Kong. The page title "登录" suggests a login interface, though the exact content and target brand remain unverified beyond its classification as a gambling scam. Infrastructure analysis reveals the use of Cloudflare nameservers (glen.ns.cloudflare.com and roxy.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. Security vendor detections indicate that 3 of 95 engines on VirusTotal have flagged this domain, while it appears on at least one security blocklist. The domain employs a Let's Encrypt SSL certificate (R13) and utilizes frontend technologies including jQuery, jQuery UI, and jQuery CDN, which are often leveraged to create convincing fake interfaces. The HTTP 301 redirect status further suggests the site may be funneling visitors to another malicious endpoint, though the destination remains unconfirmed. Defenders should treat this domain as high-risk due to its recent registration, gambling scam classification, and active phishing indicators. The use of Cloudflare nameservers and a Microsoft-hosted IP may complicate attribution, but the domain's presence on blocklists and vendor detections provide actionable intelligence for mitigation. Network-level blocking of 20.255.104.129 and monitoring for related domains registered through Dynadot LLC are recommended. While the exact phishing kit or brand impersonation is not yet analyzed, the combination of technical evidence and scam classification warrants immediate defensive measures.