87917[.]xyz

The domain 87917.xyz is assessed to pose an elevated risk of brand impersonation. Specifically, it impersonates the well-known online betting platform Bet365, potentially leading to credential theft and financial loss for unsuspecting users.

Analysis of the domain reveals that it has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the cybersecurity community. The domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 45.119.97.37, which is located in the United States and is associated with AS133861 SonderCloud Limited. The domain was created on February 21, 2026, and currently does not possess an SSL certificate, which is a common indicator of a lack of genuine security practices. Additionally, 87917.xyz appears on one security blocklist and is blocked by the PhishDestroy service, further confirming its malicious nature.

To mitigate the risks associated with this Bet365 impersonation scam, users are advised to verify the URL of any website they visit, especially those related to financial transactions or sensitive information. It is crucial to ensure that the domain name matches the official Bet365 website and to look for the presence of a valid SSL certificate, which is typically indicated by the 'https://' prefix and a padlock icon in the browser's address bar. Organizations and individuals should also consider implementing DNS-based blocking or using security software that can detect and prevent access to known malicious domains. Regularly updating security awareness training to include examples of such impersonation tactics can also help users recognize and avoid these types of threats.