84738[.]xyz

The domain 84738.xyz is a confirmed phishing site engaged in brand impersonation targeting Bet365, a well-known gambling platform. It presents itself as a legitimate Bet365 login or promotional page to deceive users into entering credentials or financial details. As of the latest verification, 84738.xyz has been taken offline, but it previously operated as a gambling scam with no associated crypto drainer kit.

Technical indicators confirm the malicious nature of 84738.xyz. The domain was flagged by 15 of 95 security vendors on VirusTotal, including ADMINUSLabs, Criminal IP, and alphaMountain.ai, though Google Safe Browsing did not detect it. It appears on one security blocklist (PhishDestroy) and was created on February 21, 2026. The domain resolved to the IP address 45.196.247.189, hosted in Hong Kong under AS140224 Nebula Global LLC, and used an SSL certificate issued by R13. The observed page title was 'welcome-BET365,' reinforcing its impersonation of Bet365. AlienVault OTX also listed 84738.xyz in two threat intelligence pulses.

Users who interacted with 84738.xyz should immediately change any credentials entered on the site, particularly for Bet365 or linked financial accounts. Enable two-factor authentication (2FA) on all sensitive accounts to prevent unauthorized access. Monitor bank and gambling accounts for unusual activity, such as unauthorized transactions or login attempts. Report the domain to relevant authorities, including the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org, and consider submitting it to Google Safe Browsing or other security platforms to aid in broader protection efforts.