m86e[.]xyz

The domain m86e.xyz presents an elevated risk level due to its brand impersonation of Bet365, a well-known online betting platform. This type of threat is designed to deceive users into divulging sensitive information, such as login credentials and financial data, which can be used for fraudulent activities or identity theft.

Analysis indicates that m86e.xyz is flagged by 14 out of 95 security vendors on VirusTotal, suggesting a moderate to high level of suspicion. The domain is registered through Gname.com Pte. Ltd., a registrar that may be associated with other malicious activities. The domain resolves to the IP address 45.196.247.159, which is located in Hong Kong and is part of the AS140224 Nebula Global LLC network. The domain was created on May 16, 2025, and currently appears on two security blocklists: PhishDestroy and PhishingDB. Notably, the domain does not have an SSL certificate, which is a red flag for security-conscious users and indicates a lack of secure data transmission.

To mitigate the risks associated with this brand impersonation, users are advised to verify the URL and SSL certificate of any Bet365-related sites they visit. Security teams should update their blocklists to include m86e.xyz and monitor for any related activity. Additionally, organizations should conduct user awareness training to recognize and report phishing attempts, particularly those impersonating trusted brands like Bet365.