x85h[.]xyz

This domain, x85h.xyz, is identified as a brand impersonation threat targeting Bet365, a well-known online betting platform. The site is designed to deceive visitors into believing they are interacting with the legitimate Bet365 service, potentially leading to credential theft, financial fraud, or unauthorized account access. The page title, 'welcome-BET365,' reinforces the deception by mimicking the branding of the authentic service. Users who engage with this site risk exposing sensitive login details or personal information to malicious actors.

Analysis indicates this domain is flagged by 19 out of 95 security vendors on VirusTotal, confirming its malicious nature. The domain was registered on December 03, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to an IP address (45.196.247.206) hosted in Hong Kong under AS140224 (Nebula Global LLC), a network with a history of hosting phishing and fraudulent content. Additionally, the domain appears on two security blocklists and lacks an SSL certificate, further reducing its legitimacy.

If you visited x85h.xyz or entered any information on the site, immediate action is required. First, disconnect the device from the network to prevent potential malware execution or data exfiltration. Run a full system scan using updated security tools to detect and remove any threats. Change passwords for all accounts accessed from the compromised device, prioritizing financial and email accounts. Enable multi-factor authentication where available to add an extra layer of security. Monitor accounts for unauthorized transactions or suspicious activity, and report any anomalies to the legitimate service provider. Avoid reusing passwords across multiple platforms to minimize further risk.