s99k[.]xyz

This domain, s99k.xyz, is identified as a brand impersonation phishing site designed to deceive users of Bet365, a well-known online gambling platform. The site mimics the legitimate Bet365 interface, presenting a page titled 'welcome-BET365' to trick visitors into entering sensitive credentials, financial details, or other personal information. Such impersonation attacks are commonly used to harvest login data, facilitate unauthorized transactions, or deploy secondary malware payloads, posing significant risks to user privacy and financial security. Analysis indicates that s99k.xyz was created on January 04, 2026, and registered through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. The domain resolves to the IP address 45.196.247.160, hosted on AS140224 (Nebula Global LLC) in Hong Kong. At the time of assessment, 19 out of 95 security vendors on VirusTotal flagged this domain as malicious, with one security blocklist (PhishDestroy) explicitly listing it. The SSL certificate, identified as R12, further suggests a lack of legitimate security measures, as such certificates are often used in low-effort phishing campaigns. Users who visited s99k.xyz should take immediate action to mitigate potential risks. First, disconnect the device from the network to prevent further data exfiltration. Run a full antivirus scan to detect and remove any malware or spyware that may have been installed. If credentials or financial details were entered, change passwords immediately for all associated accounts, particularly Bet365 and any linked email or banking services. Enable multi-factor authentication where available. Monitor financial statements for unauthorized transactions and report any suspicious activity to the relevant financial institution. Finally, consider notifying local cybersecurity authorities or the impersonated brand to assist in broader mitigation efforts.