61874[.]xyz

This domain, 61874.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a well-known online betting platform. The site mimics legitimate Bet365 branding, including the use of 'welcome-BET365' in its page title, to deceive users into entering sensitive information such as login credentials, payment details, or personal data. Such impersonation attacks are commonly used to facilitate financial fraud, account takeovers, or unauthorized transactions, posing significant risks to individuals who interact with the site. Analysis indicates that 61874.xyz was registered on February 22, 2026, through Gname.com Pte. Ltd., a registrar often associated with high-risk domains. The domain currently resolves to the IP address 103.59.145.243, which is hosted under AS133861 (SonderCloud Limited) in the United States. Notably, the domain lacks an SSL certificate, a critical security measure that legitimate platforms typically implement to encrypt user data. Security vendors have flagged this domain as malicious, with 21 out of 95 engines on VirusTotal detecting it as a threat. Additionally, the domain appears on one security blocklist, further corroborating its malicious nature. Users who have visited 61874.xyz or entered any information on the site should take immediate action to mitigate potential risks. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. If login credentials or financial details were provided, change passwords for all associated accounts, particularly Bet365 and any linked email or banking services. Enable multi-factor authentication where available to add an extra layer of security. Monitor financial statements and account activity for any unauthorized transactions, and report suspicious activity to the relevant financial institutions. Finally, consider running a full security scan on any devices used to access the site to detect and remove potential malware or spyware.