ts8851[.]com

The domain ts8851.com was registered through GoDaddy.com, LLC on June 17, 2025. Its authoritative name servers are ns1.dnsip.com and ns2.dnsip.com, and DNS resolution points to the IPv4 address 20.2.172.139, which belongs to AS8075 owned by Microsoft Corporation and is geolocated in Hong Kong. No TLS certificate was observed, indicating the site was served over plain HTTP. The page title returned by the server is “bet365”, matching the declared brand target Bet365 and aligning with the reported scam type of crypto gambling.

VirusTotal analysis shows that 14 of 95 scanned security vendors flagged the domain, and the domain appears on a single external blocklist. AlienVault OTX records the domain in 16 threat‑intelligence pulses, and PhishDestroy has listed it as blocked. The domain is currently marked offline, and there are no further public HTTP status codes available.

Evidence suggests a short‑lived infrastructure used to impersonate the Bet365 brand for crypto‑gambling fraud, but the exact payload or credential‑harvesting page has not been captured. Defenders should add the IP address 20.2.172.139 to network deny lists, monitor for any resurgence of the same name servers, and ensure that URL filtering solutions block any future resolution of ts8851.com. Continuous threat‑intel feeds should be consulted for updates, and any traffic to the domain should be logged and investigated as potential brand‑impersonation activity.