x02x[.]xyz

PhishDestroy identifies x02x.xyz as a brand impersonation phishing domain specifically targeting Bet365, currently taken offline. This domain was created on April 18, 2025, and was designed to deceive users into believing they were accessing legitimate Bet365 services, as evidenced by the page title 'welcome-BET365'.

The technical indicators reveal a clear threat: the domain resolves to IP address 45.196.247.189, was registered through Gname.com Pte. Ltd., and possesses an SSL certificate from R13. Analysis shows that 13 out of 95 VirusTotal security vendors flagged this domain as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX recorded this domain in 14 separate threat intelligence pulses, underscoring its widespread recognition as a threat.

As the domain is now offline, the immediate risk to users is mitigated. However, PhishDestroy recommends that users who may have interacted with x02x.xyz change their Bet365 credentials immediately and monitor accounts for suspicious activity. Organizations should add this domain to their blocklists and educate users about the dangers of brand impersonation phishing. Continued vigilance is essential, as similar domains may reappear under different names or IP addresses.