80124[.]xyz

This domain, 80124.xyz, is identified as a brand impersonation threat targeting Bet365, a well-known online betting platform. The site is designed to deceive users into believing they are interacting with the legitimate Bet365 service, potentially leading to unauthorized access to accounts, financial loss, or exposure of sensitive personal and financial information. The page title, 'welcome-BET365,' further reinforces the attempt to mimic the official brand, increasing the likelihood of successful deception among unsuspecting visitors. Analysis indicates that 80124.xyz is flagged by 17 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. The domain was registered on November 03, 2025, through Gname.com Pte. Ltd., a registrar often associated with suspicious or short-lived domains. Infrastructure analysis reveals the domain resolves to the IP address 45.196.247.162, hosted under AS140224 (Nebula Global LLC) in Hong Kong. The SSL certificate is issued to 'Default Company Ltd,' a generic and non-specific identifier commonly used by malicious actors to avoid detection. Additionally, the domain appears on two security blocklists, PhishDestroy and PhishingDB, further confirming its classification as a threat. Users who have visited 80124.xyz should take immediate action to mitigate potential risks. First, disconnect the device from the network to prevent any ongoing data exfiltration or communication with command-and-control servers. Run a full antivirus scan to detect and remove any malware or unwanted applications that may have been installed. If credentials were entered on the site, change passwords immediately for Bet365 and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. Monitor financial statements and account activity for any unauthorized transactions, and report suspicious activity to the relevant financial institutions. Finally, consider reporting the incident to local cybersecurity authorities or the legitimate Bet365 support team to assist in broader threat mitigation efforts.