b119u[.]xyz

The domain b119u.xyz was registered on June 12, 2025 through Gname.com Pte. Ltd. and is currently resolved to the IP address 45.196.247.159, which belongs to AS140224 Nebula Global LLC and is geolocated in Hong Kong. Authoritative name servers ns1‑ns4.1111343.com host the zone, indicating the use of a generic hosting panel rather than a brand‑specific infrastructure. No SSL certificate is presented, meaning the site operates only over HTTP, which further reduces trustworthiness. Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 / 100 and Gridinsoft reports 0 / 100.

The domain appears on a single security blocklist and has been explicitly flagged by the anti‑phishing service PhishDestroy. Threat intelligence aggregators have recorded the host in two AlienVault OTX pulses, confirming that it is part of known malicious campaigns. VirusTotal analysis shows that 14 of 95 scanning engines label the domain as malicious, reinforcing the suspicion of illicit activity. The only publicly visible attribute is the page title “welcome‑BET365”, which aligns with the declared brand target Bet365 and suggests a crypto‑gambling impersonation scheme.

The site is presently taken offline, so content cannot be examined, but the combination of a brand‑specific title, low trust scores, blocklist presence, and multiple vendor detections provides strong evidence of a brand‑impersonation scam. Defenders should block both the domain and its associated IP, monitor the listed name servers for future use, and add the host to internal threat‑intel feeds. Continuous watch for new domains registered by the same registrar or using the same name‑server pattern is recommended to pre‑empt similar impersonation attempts.