3365[.]us

Analysis of the domain 3365.us indicates it was actively involved in a crypto gambling scam impersonating Bet365, as evidenced by its page title and classification in threat intelligence sources. The domain, registered on November 6, 2025, through Dynadot LLC, resolved to the IP address 103.86.46.165, hosted in South Korea under AS138195 (MOACK.Co.LTD). No SSL certificate was present, increasing the risk of unencrypted data interception. The domain appeared on one security blocklist and was flagged by 16 of 93 security vendors on VirusTotal, suggesting moderate detection coverage.

AlienVault OTX recorded its presence in one threat intelligence pulse, further corroborating its malicious classification. Nameservers were configured under Cloudflare (merlin.ns.cloudflare.com and uma.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. The domain is currently offline, though its infrastructure remains a potential vector for future abuse.

Defenders should treat any residual DNS records or cached references as high-risk and monitor for re-registration or similar domains using the same IP or registrar. The absence of SSL and the use of Cloudflare nameservers are notable indicators for automated detection rules. No additional content analysis is available, so the exact mechanics of the scam remain unverified.