x92m[.]xyz

This domain, x92m.xyz, poses a brand impersonation threat specifically targeting Bet365, a well-known online betting platform. The site is designed to deceive users into believing they are accessing a legitimate Bet365 portal, likely to harvest login credentials, payment details, or other sensitive information. The page title, 'welcome-BET365,' directly mimics the branding of the legitimate service, increasing the likelihood of successful deception, particularly among users seeking quick access to betting services. Analysis indicates that x92m.xyz was registered on January 04, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. The domain resolves to the IP address 45.196.247.146, located in Hong Kong under AS140224 (Nebula Global LLC). At the time of assessment, 18 out of 95 security vendors on VirusTotal flagged this domain as malicious, and it appears on at least one security blocklist. The SSL certificate (R13) does not align with typical certificates issued for legitimate Bet365 domains, further indicating its fraudulent nature. The domain has since been taken offline, but its infrastructure remains a potential risk for future malicious activity. Users who visited x92m.xyz should take immediate action to mitigate potential risks. First, reset any credentials entered on the site, particularly Bet365 login details, using a secure device and a unique, strong password. Monitor financial accounts linked to Bet365 for unauthorized transactions and enable multi-factor authentication where available. If payment information was submitted, contact the financial institution to report potential fraud and request a card replacement if necessary. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy malicious scripts or payloads. Report the incident to relevant cybersecurity authorities or the legitimate Bet365 security team to aid in tracking and mitigating further threats.