90434[.]xyz

This domain, 90434.xyz, is identified as a brand impersonation threat specifically targeting Bet365, a recognized online betting platform. The domain is currently offline, but prior activity indicates malicious intent through fraudulent representation of the legitimate brand. The page title, 'welcome-BET365,' explicitly confirms the impersonation attempt, designed to deceive users into believing they are accessing the official Bet365 service. Analysis of 90434.xyz reveals multiple technical indicators of compromise. The domain was flagged by 20 out of 95 security vendors on VirusTotal, indicating a consensus on its malicious nature. It was registered through Gname.com Pte. Ltd. on February 21, 2026, and resolves to the IP address 45.196.247.27, hosted in Hong Kong under AS140224 (Nebula Global LLC). The domain appears on one security blocklist, and no SSL certificate was detected, further reducing its legitimacy. Infrastructure analysis reveals the domain was created with a future date, a tactic occasionally used to evade immediate detection or to align with planned attack timelines. The domain is currently offline, mitigating immediate risk to end users. However, organizations and individuals should treat this domain as a confirmed malicious indicator. Network security teams are advised to block 90434.xyz and its associated IP (45.196.247.27) at the perimeter level. Endpoint protection solutions should be updated to include this domain in denylists. Users who may have interacted with the domain should be instructed to reset credentials, particularly if they entered login details or financial information. Monitoring for similar domain registrations (e.g., typosquatting or brand misuse) under the same registrar or IP range is recommended to preempt future threats.