0802bet[.]com

Analysis of 0802bet.com indicates a high‑confidence crypto‑gambling phishing operation that was taken offline as of the report date, July 23 2026. The domain was registered through Gname.com Pte. Ltd. on March 24 2024 and resolves to the IPv4 address 156.234.227.173, which is hosted in Hong Kong under ASN 138415 (Yancy Limited). No TLS certificate is present, meaning the site served only HTTP traffic. The page title returned from the host is the Chinese word "欢迎" (welcome), providing no further context about the service offered.

Reputation services show extreme distrust: Gridinsoft assigns a trust score of 0 / 100, Scamadviser rates the site 1 / 100, and the domain appears on a single security blocklist. VirusTotal scans report 15 of 95 antivirus engines flagging the domain as malicious, and AlienVault OTX lists the domain in 16 threat‑intel pulses, reinforcing the malicious classification. PhishDestroy has also blocked the domain.

While the infrastructure and detection data confirm the site’s malicious intent, the exact phishing kit, payload delivery method, and victim interaction flow remain unknown due to the offline status and lack of SSL. Defenders should continue to block the domain and its IP at perimeter firewalls, update URL filtering feeds with the observed indicators, and monitor for any re‑hosting attempts that reuse the same registrar or nameserver set (a.share‑dns.com, a1.share‑dns.com, b.share‑dns.net, b1.share‑dns.net). Additional threat‑intel correlation with the 16 OTX pulses may reveal related campaigns or shared command‑and‑control infrastructure.