84371[.]xyz

Analysis of the domain 84371.xyz confirms it as a fraudulent site impersonating Bet365, a well-known gambling platform. The domain was registered on December 22, 2025, through Gname.com Pte. Ltd. and is currently offline, though it previously resolved to the IP address 103.233.249.125, hosted in Hong Kong under AS132839 (POWER LINE DATACENTER). The page title, 'welcome-BET365,' directly references the targeted brand, and the scam type is classified as crypto gambling, aligning with the impersonation of Bet365’s services. Security vendor detections are notable: 16 of 93 engines on VirusTotal flagged the domain as malicious, and it appears in one security blocklist, specifically PhishDestroy.

AlienVault OTX records the domain in two threat intelligence pulses, indicating prior malicious activity. The SSL certificate is issued by R13, a provider often associated with low-reputation or short-lived domains. Nameservers are hosted under A.SHARE-DNS.COM and B.SHARE-DNS.NET, infrastructure frequently observed in phishing and scam operations.

While the domain is currently offline, the combination of brand impersonation, crypto gambling classification, and detection by multiple security vendors confirms its fraudulent nature. Defenders should treat this domain as a confirmed threat, block it at the DNS and firewall levels, and monitor for any reactivation or related infrastructure. The exact content of the site remains unanalyzed, but the available indicators—registration details, hosting, and detection data—provide sufficient evidence for classification as a high-risk scam site.