83400[.]xyz

This domain 83400.xyz is currently flagged as a brand‑impersonation site targeting Bet365. The domain was registered on 12 December 2025 through Gname.com Pte. Ltd. and resolves to the IPv4 address 45.196.247.168, which belongs to AS140224 (Nebula Global LLC) and is geolocated in Hong Kong. The web server presented an SSL certificate identified as “R12”, and the page title returned by the HTTP response is “welcome‑BET365”, confirming the explicit reference to the Bet365 brand. The site was classified as a “Crypto Gambling” scam, indicating that the malicious actors likely attempted to lure Bet365 customers into a cryptocurrency‑based gambling scheme. Technical reputation checks show a very low trust score: Gridinsoft assigned 0 out of 100, and the domain appears on a single security blocklist.

It has been blocked by the PhishDestroy service and is listed in one AlienVault OTX pulse. VirusTotal scans recorded 12 detections out of 93 participating scanners, reinforcing the malicious assessment. The domain is presently taken offline, which limits immediate exposure but does not eliminate the risk that the same infrastructure could be re‑used for future campaigns. Uncertainties remain regarding the exact content that was served before takedown, the phishing kit or scripts used, and whether any credential‑stealing forms were active.

No additional open‑source evidence, such as Safe Browsing or other blocklist entries, is available beyond the items listed. Defenders should proactively block 83400.xyz at the DNS and proxy layers, add the associated IP address 45.196.247.168 to deny lists, and ingest the domain and IP indicators from PhishDestroy, Gridinsoft, and AlienVault OTX into their SIEM and threat‑intel platforms. Continuous monitoring of the registrar Gname.com Pte. Ltd. for new registrations that resemble the same naming pattern is advised, as well as periodic re‑scanning of the IP space for re‑activation.