u52j[.]xyz

Analysis indicates that the domain u52j.xyz was registered on 21 February 2026 and currently resolves to the IPv4 address 45.196.247.189, which is advertised as belonging to Nebula Global LLC (AS140224) and geolocated in Hong Kong. The site presents a page title of “welcome‑BET365”, explicitly referencing the Bet365 brand, and is classified as a crypto‑gambling impersonation of that brand. The SSL certificate associated with the host is identified as “R12”, confirming that TLS is in use but offering no evidence of legitimate ownership. The domain is listed on at least one public blocklist and is actively blocked by the PhishDestroy service.

In the AlienVault Open Threat Exchange, u52j.xyz appears in fourteen separate threat‑intel pulses, reinforcing its reputation as a malicious indicator. VirusTotal scans show that twelve of ninety‑three security engines returned a positive detection for the domain, further substantiating its malicious status. No public safe‑browsing verdict or reputation score is supplied in the available data, and no additional content from the landing page has been disclosed beyond the title.

The combination of brand impersonation, cryptocurrency‑focused gambling lure, and the observed detection history suggests a high likelihood that the site is used to lure victims into fraudulent betting or crypto‑investment schemes. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any future resolution changes, and correlate any outbound traffic to the IP 45.196.247.189 with known crypto‑gambling threat patterns. Incident response teams should also advise users to avoid any unsolicited communications that reference Bet365 and to report any attempted credential or wallet interactions to the appropriate security channels.