b113g[.]xyz

This domain, b113g.xyz, is flagged as a brand impersonation threat specifically targeting Bet365, a well-known online betting platform. Analysis of the page title, 'welcome-BET365,' confirms the intent to deceive users by mimicking the legitimate brand's interface and branding elements. No crypto drainer kit signatures were detected in initial scans, but the domain's structure and content align with credential theft campaigns designed to harvest login credentials and personal information from unsuspecting victims. Infrastructure analysis reveals critical technical indicators associated with this threat. The domain resolves to IP address 45.119.97.37, hosted under AS133861 (SonderCloud Limited), and was registered on February 21, 2026, through Gname.com Pte. Ltd. Security vendor assessments on VirusTotal show 18 out of 95 detections, indicating a moderate but concerning level of consensus regarding its malicious nature. The domain appears on one security blocklist and was actively blocked by PhishDestroy. Notably, the domain lacks an SSL certificate, a red flag for any site handling user credentials, further confirming its illegitimate purpose. As of the latest assessment, b113g.xyz has been taken offline, likely in response to security vendor interventions or registrar enforcement actions. However, the residual risk remains elevated due to the domain's recent activity and the potential for threat actors to re-deploy similar infrastructure under new domains. Users who may have interacted with this site are advised to immediately reset their Bet365 account credentials and monitor for unauthorized transactions. Organizations should update their threat intelligence feeds to include this domain and its associated IP address, while end-users are cautioned to verify domain authenticity before entering sensitive information on any platform.