h97a[.]xyz

This domain is flagged as a brand impersonation threat. Analysis indicates that it presented content designed to resemble a well-known online platform, increasing the likelihood of credential theft, account compromise, or other forms of user deception. The observed page title, "welcome-BET365", is consistent with impersonation behavior, while the absence of an SSL certificate further reduces trustworthiness. Although the site is currently offline, previously observed indicators suggest it may have been used to mislead visitors into interacting with fraudulent content. Infrastructure review shows resolution to IP address 103.59.145.243 within AS133861 SonderCloud Limited.

Technical evidence supports the elevated-risk assessment. The domain was created on February 10, 2026 and registered through Gname.com Pte. Ltd. Security telemetry shows that 22 out of 95 VirusTotal vendors flagged the domain as malicious or suspicious. Additional intelligence indicates that the domain was blocked by PhishDestroy and appears on 1 security blocklist. The combination of recent registration, multiple security detections, impersonation indicators, lack of SSL configuration, and blocklist presence strengthens confidence that the domain posed a meaningful security risk before being taken offline.

If a user visited this domain, a precautionary review of account activity is recommended. Any credentials entered while the site was active should be considered potentially exposed and changed immediately on the legitimate service. Password reuse across multiple accounts should be addressed by updating affected credentials and enabling multi-factor authentication where available. Systems that accessed the domain should be scanned for unwanted software, browser extensions, or unauthorized changes. Security teams may also wish to review DNS logs, web proxy records, and endpoint telemetry for connections to h97a.xyz or 103.59.145.243 to identify additional exposure and determine whether further incident response actions are required.