a61y[.]xyz

This domain, a61y.xyz, is flagged for brand impersonation phishing targeting Bet365, a well-known online gambling platform. The phishing page displays the title 'welcome-BET365,' directly mimicking the legitimate brand to deceive users into disclosing credentials or financial information. No drainer kit signatures were identified in initial scans, though the absence of an SSL certificate and the use of a recently registered domain are consistent with low-sophistication phishing infrastructure. Analysis indicates the domain was registered on December 27, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. It resolves to the IP address 45.196.247.160, geolocated in Hong Kong under AS140224 (Nebula Global LLC), a network provider with a history of hosting malicious activity. VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently not listed in Google Safe Browsing. No SSL certificate was detected, increasing the likelihood of interception or tampering during data transmission. As of the latest verification, a61y.xyz has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure remains a residual risk, as domains registered through the same registrar and resolving to similar IP ranges have been observed reactivating under new names. Users who may have interacted with the domain are advised to reset credentials, enable multi-factor authentication, and monitor financial transactions for unauthorized activity. Organizations should update blocklists to include the domain and associated IP address to prevent future access attempts.