g62t[.]xyz

This domain, g62t.xyz, is identified as a brand impersonation phishing site currently marked offline. It specifically targets Bet365, a well-known online gambling and sports betting platform, by mimicking its branding to deceive users into disclosing sensitive credentials or financial information. The page title, welcome-BET365, further confirms the intent to impersonate the legitimate Bet365 platform. Analysis indicates the domain was registered on February 21, 2026, through Gname.com Pte. Ltd. and resolves to the IP address 45.196.247.25, hosted under AS140224 (Nebula Global LLC) in Hong Kong. Security vendors have flagged this domain, with 19 out of 95 VirusTotal engines detecting it as malicious. It appears on one security blocklist and was previously blocked by at least one threat intelligence feed. Notably, the domain lacks an SSL certificate, increasing the risk of unencrypted data transmission and further exposing victims to interception. As of the latest assessment, g62t.xyz is offline, reducing immediate exposure. However, organizations and users should remain vigilant, as similar infrastructure may resurface under different domains or IPs. It is recommended to block the domain and its associated IP (45.196.247.25) at the network level, update endpoint protection rules, and monitor for related phishing campaigns. Users who may have interacted with this site should reset credentials immediately and enable multi-factor authentication on all sensitive accounts. Security teams are advised to review logs for connections to the IP and domain to identify potential compromises.