h83e[.]xyz

The domain h83e.xyz is a confirmed phishing site engaged in brand impersonation targeting Bet365, a well-known gambling platform. It presents itself as a legitimate Bet365 portal to deceive users into entering credentials or financial details, constituting a gambling scam. As of the latest verification, h83e.xyz has been taken offline, though its prior activity remains a documented threat.

Technical analysis reveals h83e.xyz was flagged by 15 of 95 VirusTotal security vendors, including ADMINUSLabs, Criminal IP, and alphaMountain.ai. The domain was registered through Gname.com Pte. Ltd. on December 22, 2025, and resolved to the IP address 45.196.247.160, located in Hong Kong under AS140224 Nebula Global LLC. It appeared on one security blocklist (PhishDestroy) and was referenced in one AlienVault OTX threat intelligence pulse. The SSL certificate was issued by R12, and the observed page title was 'welcome-BET365'. Google Safe Browsing did not flag the domain, though Gridinsoft assigned it a trust score of 0/100.

Users who interacted with h83e.xyz should immediately change any credentials entered on the site, particularly Bet365 login details, and enable two-factor authentication on their accounts. Monitor financial statements for unauthorized transactions and report suspected fraud to the impersonated brand’s official support channels. The domain can be reported to Google Safe Browsing, PhishTank, or the registrar (Gname.com Pte. Ltd.) for further action. If cryptocurrency was involved, revoking token approvals and transferring funds to a new wallet is recommended.