x59d[.]xyz

This domain, x59d.xyz, was designed to impersonate the well-known betting platform Bet365, tricking visitors into revealing their login credentials or personal information. The site's title, "welcome-BET365," is a clear attempt to appear legitimate, but the domain is a classic example of brand impersonation phishing. Although it has been taken offline, the threat it posed was real, and similar sites may still be active.

PhishDestroy identified this threat through multiple indicators. The domain was created on August 14, 2025, and registered through Gname.com Pte. Ltd., a registrar often associated with malicious domains. It resolved to IP address 45.196.247.162, and VirusTotal flagged it with 11 out of 95 security vendors marking it as malicious. Additionally, AlienVault OTX recorded it in 15 threat intelligence pulses, and it appeared on one security blocklist. Notably, the site lacked an SSL certificate, which is a red flag for any site handling sensitive information.

If you visited x59d.xyz, you should take immediate action. Change your Bet365 password and any other accounts where you use the same credentials. Monitor your financial accounts for suspicious activity and consider enabling two-factor authentication on all important accounts. Run a full security scan on your device using reputable antivirus software. Stay vigilant against similar phishing attempts and always verify URLs before entering personal information.