90428[.]xyz

This domain, 90428.xyz, operates as a brand impersonation site designed to deceive users of the legitimate Bet365 platform. The site mimics the appearance and branding of Bet365, a well-known online betting service, to trick visitors into entering sensitive account credentials, personal information, or financial details. Such impersonation attacks often lead to unauthorized account access, financial loss, or identity theft, particularly in regions where Bet365 has a significant user base. The page title, 'welcome-BET365,' further reinforces the illusion of legitimacy, increasing the likelihood of successful deception. Analysis indicates that 90428.xyz was registered on February 21, 2026, through the registrar Gname.com Pte. Ltd., a provider frequently associated with high-risk domains. The domain currently resolves to the IP address 45.196.247.179, hosted under AS140224 (Nebula Global LLC) in Hong Kong. At the time of assessment, the domain lacked an SSL certificate, a red flag for user security, as it exposes data transmitted between the user and the site to interception. Security vendors on VirusTotal have flagged this domain as malicious, with 19 out of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist, and its infrastructure has been taken offline, though prior exposure may still pose risks to users who interacted with it. Users who visited 90428.xyz should take immediate action to mitigate potential risks. If any credentials or personal information were entered on the site, Bet365 account passwords should be changed immediately, and two-factor authentication should be enabled if not already active. Monitor the account for unauthorized transactions or suspicious activity, and report any anomalies to Bet365 support. Financial institutions should be notified if payment details were provided. To prevent future incidents, users are advised to verify domain authenticity before entering credentials, check for HTTPS encryption, and rely on official Bet365 channels for access. Security software should be updated to detect and block similar threats.