j269t[.]xyz

j269t.xyz was created on 2026-02-21 and resolves to the IPv4 address 45.196.247.25, which is registered to Nebula Global LLC in Hong Kong (AS140224). The site presents the page title “welcome-BET365”, indicating a direct brand impersonation of Bet365. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows that 15 of 93 scanning engines raise a detection, confirming malicious intent. Gridinsoft assigns a trust score of 0 / 100, and AlienVault OTX references the domain in one threat‑intel pulse.

The SSL certificate is catalogued as “R13”, and the observed scam category is “Crypto Gambling”. Current HTTP status is offline, suggesting the site has been taken down or is temporarily unavailable. The available evidence confirms that the infrastructure is being used to masquerade as Bet365 for a crypto‑gambling fraud campaign. However, no payload samples, login pages, or credential‑harvest mechanisms have been publicly captured, leaving the exact attack vector uncertain.

The single blocklist listing and the relatively low VirusTotal detection count imply limited exposure, but the presence of a trust‑score zero and OTX pulse indicates a non‑trivial threat. Defenders should add 45.196.247.25 to network‑level deny lists, enforce domain‑based filtering for any sub‑domains of j269t.xyz, and monitor DNS queries for re‑registration attempts. Continuous re‑scanning on VirusTotal and inclusion in internal threat‑intel feeds are recommended to catch potential re‑activation. Organizations that use Bet365 services should educate users about the “welcome-BET365” title and verify URLs before any transaction involving cryptocurrency gambling.