8272[.]bar

Analysis of the domain 8272.bar indicates a confirmed phishing campaign impersonating Bet365, a recognized gambling platform, with a focus on crypto gambling fraud. The domain was registered on February 9, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals resolution to the IP address 103.142.146.88, hosted in Hong Kong under AS135581 (ONL-HK). The domain's nameservers, ns1.dnsip.com and ns2.dnsip.com, are consistent with patterns observed in other phishing operations targeting financial and gambling sectors. Security vendor detections on VirusTotal report 16 of 95 engines flagging the domain as malicious, while AlienVault OTX lists it in 17 threat intelligence pulses, suggesting active tracking by defenders.

The domain appears on at least one security blocklist and is explicitly blocked by PhishDestroy. Scamadviser assigns a trust score of 1 out of 100, reinforcing its classification as high-risk. The page title, 'bet365,' directly aligns with the impersonated brand, and the scam type is explicitly categorized as crypto gambling fraud. No SSL certificate was detected, a common omission in low-effort phishing sites designed for short-term abuse.

As of July 23, 2026, the domain is offline, though historical resolution and detection data remain relevant for retrospective analysis. Defenders should treat this domain as a confirmed threat vector, particularly for users of Bet365 or cryptocurrency-related services. While the exact content of the phishing page is not analysed, the combination of brand impersonation, low trust scores, and multi-engine detections confirms its malicious intent. Organizations are advised to block resolution to 103.142.146.88 and monitor for related domains registered through the same registrar or nameserver infrastructure.