h99q[.]xyz

This domain, h99q.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a well-known online gambling platform. The site presents itself under the page title 'welcome-BET365,' attempting to deceive users into believing it is the legitimate Bet365 service. Such impersonation domains are commonly used to harvest login credentials, financial details, or distribute malware under the guise of trusted brands, posing significant risks to user privacy and financial security.

Analysis of h99q.xyz reveals multiple technical indicators of malicious activity. The domain is flagged by 21 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious intent. It was registered on February 23, 2026, through Gname.com Pte. Ltd., and appears on one security blocklist. Infrastructure analysis shows the domain resolves to the IP address 45.196.247.179, located in Hong Kong under AS140224 (Nebula Global LLC). The SSL certificate is identified as R13, a detail that may aid in further tracking or blocking efforts.

Users who have visited h99q.xyz should take immediate action to mitigate potential risks. If any credentials or personal information were entered on the site, they should be changed immediately on the legitimate Bet365 platform. Devices used to access the domain should undergo a thorough security scan to detect and remove any malware. Additionally, users are advised to monitor financial accounts for unauthorized transactions and report any suspicious activity to their financial institutions. Blocking the domain and its associated IP address at the network level is recommended to prevent further exposure.