b99o[.]xyz

This domain, b99o.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a prominent online betting platform. The domain is currently offline, though prior analysis confirms its use in credential theft operations designed to deceive users into submitting login credentials under false pretenses. The page title, welcome-BET365, directly mimics the legitimate brand, reinforcing the intent to mislead visitors into believing they are interacting with an official Bet365 service. Infrastructure analysis reveals multiple high-risk indicators associated with b99o.xyz. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently observed in fraudulent registrations. It resolves to the IP address 45.119.97.37, hosted under AS133861 (SonderCloud Limited), an autonomous system with a history of supporting malicious infrastructure. The domain lacks an SSL certificate, a common red flag in phishing operations where encryption is often omitted to avoid detection. Security vendors have flagged this domain, with 17 out of 95 VirusTotal vendors marking it as malicious. Additionally, it appears on one security blocklist, further corroborating its classification as a threat. The current offline status of b99o.xyz does not eliminate the risk posed by its infrastructure. Historical data suggests that such domains may resurface under different names or IP configurations to evade detection. Organizations and users are advised to implement proactive measures, including blocking the domain and its associated IP address at the network level. Security teams should monitor for similar registration patterns, such as domains created through Gname.com Pte. Ltd. or hosted on AS133861, as these may indicate emerging threats. End-users should be educated on verifying domain authenticity, particularly for financial or betting platforms, and encouraged to report suspicious URLs to security providers for further analysis.