p5115p[.]com

The domain p5115p.com has been identified as a brand impersonation threat specifically targeting Bet365, a well-known online gambling platform. Analysis confirms the domain is currently offline, though it previously hosted content mimicking the legitimate Bet365 interface, as evidenced by the page title "bet365" captured during active monitoring. This domain represents a calculated attempt to deceive users into disclosing sensitive credentials or financial information under false pretenses. Infrastructure analysis reveals that p5115p.com was registered through GoDaddy.com, LLC on September 20, 2024, and resolved to the IP address 154.213.177.126, hosted under AS54801 (Zillion Network Inc.) in Japan. Security vendor assessments indicate a significant detection rate, with 20 of 95 VirusTotal engines flagging the domain as malicious. Additionally, the domain appears on one security blocklist, further corroborating its classification as a phishing resource. The SSL certificate, issued by Let's Encrypt (R12), does not mitigate the risk, as threat actors routinely leverage valid certificates to lend false legitimacy to fraudulent sites. Current status confirms p5115p.com has been taken offline, though the underlying infrastructure remains a potential vector for future malicious activity. Organizations and end users are advised to implement proactive measures, including blocking the domain and associated IP address at the network perimeter, updating endpoint protection rules to include this indicator, and conducting retrospective log analysis for any prior interactions. Users who may have accessed the domain should immediately reset credentials for Bet365 and monitor financial accounts for unauthorized activity. Given the elevated risk profile, continuous monitoring of related domains registered through the same registrar or resolving to the identified IP range is recommended.