g62r[.]xyz

Domain g62r.xyz is assessed as a brand impersonation phishing asset targeting Bet365, designed to mimic the legitimate betting platform through deceptive branding elements including the page title 'welcome-BET365'. The observed structure and presentation indicate a credential harvesting workflow rather than any authentic gambling service functionality.

Technical telemetry shows a VirusTotal detection ratio of 18/95 security vendors flagging the domain as malicious or phishing-related. Registration data identifies Gname.com Pte. Ltd. as the registrar, with a recorded domain creation date of February 21 2026. The infrastructure resolves to IP address 45.196.247.179, geolocated in Hong Kong under AS140224 Nebula Global LLC, suggesting hosting within a potentially abused ASN. SSL certificate is absent, consistent with non-encrypted phishing deployments. Additionally, the domain appears on 1 security blocklist, and active blocking has been enforced by PhishDestroy, confirming prior detection by defensive systems.

At present the domain status is reported as taken offline, significantly limiting live user exposure. Despite shutdown status, historical indicators confirm prior active deployment of phishing infrastructure, likely used for brand impersonation and credential collection. Residual risk persists if related infrastructure, alternate domains, or mirrored hosting configurations remain active. Continued monitoring of associated IP space and registrar patterns is recommended to identify re-emergence or campaign expansion.