s101a[.]xyz

This domain, s101a.xyz, poses a targeted brand impersonation threat against Bet365, a well-known online gambling and sports betting platform. Analysis of the site's infrastructure and content reveals an intent to deceive users into believing they are interacting with the legitimate Bet365 service. The page title, 'welcome-BET365,' directly mimics the branding of the authentic platform, increasing the likelihood of successful credential theft or financial fraud against unsuspecting visitors. The absence of an SSL certificate further undermines user trust and security, as data transmitted to this domain could be intercepted or manipulated in transit. Technical indicators confirm the malicious nature of this domain. Registered through Gname.com Pte. Ltd. on January 16, 2026, s101a.xyz resolves to the IP address 45.196.247.27, hosted under AS140224 Nebula Global LLC in Hong Kong. VirusTotal detection metrics report that 17 out of 95 security vendors have flagged this domain as malicious, while it appears on at least one security blocklist. The domain's creation date, set in the future, suggests an attempt to evade initial scrutiny or align with planned campaign timelines. These factors collectively elevate the risk profile of this infrastructure. Users who have visited s101a.xyz or interacted with its content should take immediate remedial action. Any credentials or financial details entered on this domain must be considered compromised and should be changed without delay on the legitimate Bet365 platform. Affected individuals are advised to monitor their accounts for unauthorized transactions or suspicious activity. If payment information was submitted, contacting financial institutions to block or reverse fraudulent charges is recommended. Additionally, scanning the device used to access the domain for malware or unauthorized software is prudent to mitigate secondary risks.