x107h[.]xyz

This domain, x107h.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a well-known online betting platform. The site presents itself as a legitimate Bet365 portal, using the page title 'welcome-BET365' to deceive users into entering sensitive account credentials. Such impersonation attacks are designed to harvest login details, payment information, or other personal data, which can then be exploited for unauthorized access, financial fraud, or identity theft. The risk is classified as elevated due to the domain's direct targeting of a high-profile brand and its potential to mislead users into disclosing confidential information under false pretenses. Analysis indicates that x107h.xyz was registered on March 04, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. The domain resolves to the IP address 45.196.247.27, hosted under AS140224 (Nebula Global LLC) in Hong Kong, a network segment often linked to malicious activity. At the time of assessment, the domain lacked an SSL certificate, further reducing its legitimacy and increasing the likelihood of interception during data transmission. Security vendors on VirusTotal flagged the domain as malicious, with 20 out of 95 engines detecting it as a phishing or brand impersonation threat. Additionally, the domain appears on one security blocklist, reinforcing its classification as a confirmed malicious entity. Users who visited x107h.xyz should take immediate action to mitigate potential risks. First, refrain from entering any credentials or personal information on the site, as it is confirmed to be fraudulent. If login details were already submitted, change the passwords for the affected Bet365 account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all critical accounts to add an extra layer of security. Monitor financial statements and account activity for unauthorized transactions, and report any suspicious behavior to the legitimate service provider. Finally, consider running a full system scan using updated security software to detect and remove any potential malware that may have been introduced through the phishing site.