p117g[.]xyz

This domain is flagged for elevated risk due to brand_impersonation, specifically targeting Bet365, a well-known online betting platform. The fraudulent site mimics legitimate branding to deceive users into disclosing credentials or financial information, a tactic commonly associated with credential harvesting and financial fraud. Analysis indicates the domain p117g.xyz was registered on February 21, 2026, through Gname.com Pte. Ltd. It resolves to the IP address 45.196.247.26, hosted in Hong Kong under AS140224 (Nebula Global LLC). The domain appears on one security blocklist and is flagged by 21 out of 95 security vendors on VirusTotal. The page title, 'welcome-BET365,' directly references the impersonated brand, and no SSL certificate was detected, further reducing its legitimacy. Infrastructure analysis reveals the domain is currently offline, likely due to enforcement actions. Mitigation steps for this threat type include blocking the domain and its associated IP (45.196.247.26) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to brand_impersonation domains, particularly those mimicking financial or betting platforms. Security teams are advised to monitor for unusual login attempts or financial transactions originating from users who may have interacted with this domain. User awareness training should emphasize verifying domain authenticity before entering credentials, especially for high-risk sectors like online betting.