bet365vnd[.]app

Analysis indicates that the domain bet365vnd.app is actively hosting a site that claims to be associated with Bet365 in Vietnamese, as reflected in the page title “Bet365 | Bet365 tiếng việt - Bet365 đăng nhập uy tín”. The site is classified as a brand‑impersonation campaign targeting the Telegram brand and is linked to a crypto‑gambling scam. Infrastructure data show the domain resolves to IP 153.92.11.215, an address in Indonesia owned by AS47583 Hostinger International Limited. Registration was performed through NameCheap, Inc., and the authoritative nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com. The web stack consists of WordPress on MySQL and PHP behind LiteSpeed with HTTP/3 enabled, secured by a Let’s Encrypt certificate. Threat intelligence sources flag the domain: 16 of 95 VirusTotal scanners report detections, it appears on two public blocklists, and AlienVault OTX lists it in 17 pulses. Reputation services assign a trust score of 1/100 (Scamadviser) and 0/100 (Gridinsoft). The site is currently reachable (HTTP 200) and is listed as blocked by PhishDestroy and PhishingDB. While the exact phishing content has not been inspected, the convergence of brand impersonation, low trust scores, multiple detections, and blocklist presence suggests a high‑risk operation. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and add indicators to threat‑intel feeds. Continued observation is advised to confirm any changes in hosting or content.