87443[.]xyz

87443.xyz is identified as a brand impersonation threat designed to imitate Bet365 through a page presenting the title "welcome-BET365". Infrastructure analysis indicates that the domain attempted to leverage a recognized brand identity to create a deceptive web presence. The domain is currently offline, reducing direct exposure risk, but its previous operation indicates potential intent to mislead visitors seeking legitimate Bet365-related services.

Technical analysis shows that 87443.xyz was flagged by 19 of 95 VirusTotal vendors. The domain resolved to IP address 45.196.247.160, with hosting infrastructure associated with AS140224 Nebula Global LLC and an IP location in HK. The domain creation date was February 21, 2026. The domain appeared on 1 security blocklist and used an SSL certificate identified as R13. Registrar name information was not provided in the available intelligence, and no trust score values were available for assessment. These indicators, combined with the brand impersonation behavior, represent an elevated risk profile.

The current offline status prevents immediate interaction with the fraudulent page, but historical indicators should remain tracked for potential reactivation, infrastructure changes, or related domain registrations. Organizations should monitor for similar domain patterns, block known indicators where appropriate, and educate users to verify website authenticity before entering credentials or sensitive information. Security teams should continue reviewing related infrastructure, certificate changes, DNS activity, and newly registered domains that attempt to mimic established brands.