g90x[.]xyz

The domain g90x.xyz has been identified as a brand impersonation threat targeting the Bet365 brand. The domain is currently offline, which may indicate a temporary cessation of malicious activities or successful takedown efforts. The impersonation of a well-known brand such as Bet365 elevates the risk level of this domain.

Analysis indicates that g90x.xyz was flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain was registered through Gname.com Pte. Ltd. on March 18, 2026, and resolves to the IP address 45.196.247.27, which is located in Hong Kong and hosted by Nebula Global LLC. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further corroborating its malicious nature. The lack of an SSL certificate and the page title 'welcome-BET365' are notable indicators of a phishing attempt designed to deceive users into believing they are accessing legitimate Bet365 content.

Given the current status of the domain as offline, the immediate risk to users is reduced. However, the domain could potentially be reactivated in the future. Users are advised to exercise caution and avoid visiting g90x.xyz or any similar variants. Security teams should monitor the domain for any signs of reactivation and consider implementing additional measures to protect against brand impersonation attacks, such as DNS-based blacklisting and user education on recognizing phishing attempts.