e102z[.]xyz

Analysis of e102z.xyz indicates a recent brand‑impersonation operation targeting Bet365. The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and resolves to the IP address 45.119.97.37, which is assigned to AS133861 SonderCloud Limited in the United States. No TLS certificate is presented, meaning the site is served over HTTP only. The page title returned by the web server is "welcome-BET365," matching the declared brand target and confirming the intent to masquerade as the Bet365 service.

The infrastructure is partially mitigated: PhishDestroy has blocked the domain and it appears on a single external security blocklist. AlienVault OTX references the domain in one threat‑intelligence pulse, indicating limited but documented awareness in the community. VirusTotal analysis shows that 14 of 95 scanned security vendors have flagged the domain, suggesting a notable detection rate despite the relatively low number of scans.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, corroborating the malicious classification. The observed scam type is listed as "Crypto Gambling," which aligns with the brand‑impersonation theme and may be used to lure victims into fraudulent betting or cryptocurrency transactions.

Uncertainties remain regarding the exact payload delivered, user‑interaction mechanisms, and the presence of any additional malicious files, as no detailed page content has been disclosed. Defenders should continue to enforce DNS‑based blocklists for e102z.xyz, monitor outbound connections to the associated IP address, and consider adding the domain to internal URL filtering policies. Ongoing threat‑intel collection should watch for any resurgence of the domain or related infrastructure, especially given the elevated risk rating and the confirmed brand‑impersonation intent.