84415[.]xyz

The domain 84415.xyz was registered on February 21, 2026 through Gname.com Pte. Ltd. and is currently resolved to the IP address 45.119.97.37, which is assigned to AS133861 SonderCloud Limited in the United States. No TLS certificate is presented for the host, indicating that the site operates without HTTPS protection. The page title returned by the server is "welcome-BET365," and the domain is explicitly listed as impersonating the Bet365 brand, aligning with the reported scam type of crypto gambling. Infrastructure analysis shows the domain is served by the shared DNS providers a.share-dns.com, a5.share-dns.com, b.share-dns.net, and b5.share-dns.net.

Detection data reveal that 16 of 95 security vendors on VirusTotal flagged the domain as malicious, and AlienVault OTX references the domain in two separate threat intelligence pulses. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy service, confirming that defensive feeds are already aware of its malicious intent. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of high risk. The site is presently taken offline, which limits immediate exposure but does not remove the underlying infrastructure that could be reactivated.

Uncertainty remains regarding the exact content served when the site was live, as no visual or functional analysis has been performed. Defenders should continue to block the IP address 45.119.97.37 and the domain 84415.xyz at network perimeter devices, update URL filtering lists, and monitor the associated nameservers for any re‑registration attempts. Additional scrutiny of traffic to SonderCloud Limited may uncover related malicious activities. Organizations that use Bet365 credentials or promote crypto gambling should educate users about the risk of brand‑spoofing attempts and enforce multi‑factor authentication where possible.