# g95x.xyz — MALICIOUS

> PhishDestroy identifies g95x.xyz as a Bet365 brand impersonation domain flagged by 15 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies g95x.xyz as an active brand impersonation domain currently impersonating the legitimate online betting platform Bet365. This fraudulent domain is designed to deceive users into believing they are accessing an official Bet365 service, thereby risking the exposure of sensitive personal and financial information. The domain is currently classified as an elevated threat and remains operational, posing a significant risk to unsuspecting visitors.  This domain was flagged by 15 of 95 VirusTotal vendors, indicating a high likelihood of malicious activity. It was registered through Gname.com Pte. Ltd. and resolves to the IP address 45.196.247.160. The domain was created on April 07, 2026, and utilizes a Let's Encrypt SSL certificate to appear legitimate. These technical indicators, combined with the fraudulent page title "welcome-BET365," strongly suggest an ongoing phishing campaign targeting Bet365 users. The domain's recent creation date and high flagging rate on VirusTotal underscore its malicious intent.  Given the elevated risk level and active status of g95x.xyz, users are strongly advised to avoid interacting with this domain or any associated links. If you have visited this site or entered any information, immediately change your Bet365 account credentials and monitor for unauthorized transactions. Report this domain to Bet365 and your local cybersecurity authorities. Organizations should consider blocking this domain at the network level to prevent further exposure. For comprehensive threat intelligence, refer to the full report.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Bet365
- Page title: welcome-BET365

## Domain Intelligence
- Registered: 2026-04-07 07:21:08
- Registrar: Gname.com Pte. Ltd.
- IP: 45.196.247.160

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f65f08e3-c79a-490f-ba63-041f301d0541
- PhishDestroy: https://phishdestroy.io/domain/g95x.xyz/
- LLM endpoint: https://phishdestroy.io/domain/g95x.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/g95x.xyz/
Last updated: 2026-04-15