bet365800[.]vip

Analysis of bet365800.vip confirms active brand impersonation targeting Bet365, a well-known online gambling platform. The domain was registered on March 14, 2022, through Wild West Domains, Inc., and currently resolves to IP address 45.138.71.205. Infrastructure analysis reveals the use of Nginx as the web server technology, with an SSL certificate issued by GoDaddy.com. The page title, '欢迎' (translated as 'Welcome'), does not provide specific content details but aligns with common phishing site behavior. Multiple threat intelligence sources flag this domain as malicious. It appears on two security blocklists and is actively blocked by PhishDestroy and BLP-Malware. AlienVault OTX records the domain in 24 threat intelligence pulses, indicating widespread detection. Gridinsoft assigns a trust score of 0/100, while Scamadviser rates it 1/100, both confirming high-risk status. As of July 12, 2026, the domain remains active and unmitigated. Defenders should treat bet365800.vip as a confirmed phishing resource. Network-level blocking of the domain and its resolving IP (45.138.71.205) is recommended. Organizations with Bet365 users should alert employees or customers to avoid interaction with this domain. Further analysis of the site's content and payloads is advised to determine the exact phishing mechanics employed.