h96k[.]xyz

This domain, h96k.xyz, poses a specific threat of brand impersonation, targeting the well-known online betting platform Bet365. Analysis indicates that the domain is designed to deceive users by mimicking the official Bet365 website, potentially leading to the theft of personal information, credentials, and financial data.

The domain is flagged by 17 out of 95 security vendors on VirusTotal, a significant number that suggests a high level of suspicion. It is registered through Gname.com Pte. Ltd., a known registrar, and was created on February 21, 2026. The domain resolves to the IP address 45.196.247.179, which is located in Hong Kong and is part of the AS140224 network operated by Nebula Global LLC. Additionally, the domain appears on one security blocklist, further indicating its malicious nature. The absence of an SSL certificate also raises concerns, as it suggests a lack of secure communication, a common trait in phishing operations.

If users have visited h96k.xyz, they should immediately check their accounts for any unauthorized activity and change their passwords. It is recommended to use a password manager to ensure strong, unique passwords for all online accounts. Users should also monitor their financial statements for any suspicious transactions and consider enabling two-factor authentication (2FA) on their Bet365 and other sensitive accounts. Reporting the incident to Bet365's customer support can help in further securing their accounts and alerting the platform to potential security issues.