90418[.]xyz

This domain, 90418.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a well-known online gambling platform. The domain is currently offline, but prior activity indicates malicious intent to deceive users by mimicking the legitimate Bet365 brand. The page title, 'welcome-BET365,' further confirms the attempt to impersonate the official Bet365 interface, likely for credential harvesting or fraudulent transactions. Analysis of the domain reveals multiple technical indicators of compromise. The domain was created on February 21, 2026, and resolves to the IP address 45.196.247.25, located in Hong Kong under AS140224 (Nebula Global LLC). It is flagged by 19 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. Additionally, the domain appears on one security blocklist and uses an SSL certificate issued by R12. The infrastructure and timing of its creation suggest a deliberate effort to exploit users of the Bet365 platform. Despite its current offline status, the domain remains a potential risk due to its historical activity and association with known malicious infrastructure. Organizations and users are advised to block the domain and its associated IP address (45.196.247.25) at the network level. Security teams should monitor for any resurgence of activity related to this domain or similar impersonation attempts targeting Bet365. Users who may have interacted with the domain should reset their credentials immediately and enable multi-factor authentication on their accounts to mitigate potential compromise.