x54m[.]xyz

This domain, x54m.xyz, presents an elevated-risk brand impersonation threat targeting Bet365, a widely recognized online betting platform. Analysis indicates the site was designed to deceive users into entering login credentials or financial details under the false pretense of accessing Bet365 services. The page title, 'welcome-BET365,' directly references the legitimate brand, increasing the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on July 29, 2025, through Gname.com Pte. Ltd., and resolves to the IP address 45.196.247.162, hosted on AS140224 (Nebula Global LLC) in Hong Kong. Security vendors on VirusTotal flagged the domain as malicious, with 17 out of 95 engines detecting it. Additionally, the domain appears on two security blocklists and is blocked by at least two phishing-specific databases. The SSL certificate, issued to 'Default Company Ltd,' further suggests a lack of legitimate ownership or operational transparency. Users who visited x54m.xyz should take immediate remediation steps. If credentials or payment details were entered, reset passwords for Bet365 and any other accounts sharing the same credentials. Monitor financial statements for unauthorized transactions and enable multi-factor authentication where available. Organizations should update security controls to block the domain and associated IP address, while end-users should verify the authenticity of any betting-related communications by accessing the official Bet365 platform directly through verified channels.