b45094[.]com

This domain, b45094.com, operates as a brand impersonation site designed to deceive users of the legitimate Bet365 platform. The site mimics the official Bet365 interface, presenting itself as "bet365英国上市官网" (Bet365 UK Listed Official Website) to trick visitors into entering sensitive account credentials, financial details, or personal information. Such impersonation attacks often lead to unauthorized account access, financial fraud, or identity theft, particularly in regions where Bet365 is a recognized and trusted brand. The absence of SSL encryption further increases the risk, as any data transmitted to the site could be intercepted by malicious actors during transit. Analysis indicates that b45094.com was registered on July 13, 2023, through NameSilo, LLC, a registrar frequently associated with malicious domains. The domain resolves to the IP address 206.119.83.71, hosted by Hong Kong Communications International Co., Limited (AS140227), an autonomous system with a history of hosting fraudulent infrastructure. Security vendors have flagged the domain in 19 out of 95 VirusTotal scans, and it appears on two security blocklists, including PhishDestroy and PhishingDB. The lack of an SSL certificate and the use of a recently created domain with no legitimate digital footprint are consistent with known phishing tactics. Additionally, the page title explicitly references Bet365, reinforcing its intent to impersonate the brand. Users who visited b45094.com or entered any information on the site should take immediate action to mitigate potential risks. First, change passwords for Bet365 and any other accounts where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all financial and sensitive accounts to prevent unauthorized access. Monitor bank statements, transaction histories, and credit reports for signs of fraudulent activity, such as unauthorized withdrawals or unfamiliar charges. If financial data was submitted, contact the relevant financial institution to report potential fraud and request account monitoring or freezing. Users should also scan their devices for malware using reputable security tools, as some phishing sites deploy malicious scripts or payloads. Finally, report the domain to local cybersecurity authorities or consumer protection agencies to assist in broader takedown efforts and prevent further victimization.