y119e[.]xyz

This domain, y119e.xyz, is flagged for brand impersonation targeting Bet365, a well-known online betting platform. Analysis indicates the site was designed to mimic the legitimate Bet365 interface, as evidenced by the page title 'welcome-BET365,' with the intent to deceive users into engaging with fraudulent content. No crypto drainer kit signatures were identified, but the domain’s infrastructure and registration patterns align with known brand impersonation campaigns. The absence of an SSL certificate further suggests a lack of basic security measures, increasing the likelihood of malicious intent.

Infrastructure analysis reveals the following technical indicators: the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., and resolves to the IP address 45.119.97.37, hosted under AS133861 (SonderCloud Limited) in the United States. VirusTotal reports 17 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain is not listed in Google Safe Browsing (GSB) at the time of assessment, though its presence on other blocklists and the elevated detection rate on VirusTotal corroborate its fraudulent nature.

As of the latest assessment, y119e.xyz has been taken offline, likely due to enforcement actions by security providers or the registrar. However, residual risk remains due to the domain’s recent registration and the potential for re-emergence under a similar or altered infrastructure. Users who may have interacted with the domain are advised to monitor for unauthorized account activity, particularly on platforms associated with Bet365. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts. Continuous monitoring of newly registered domains with similar patterns is recommended to mitigate further brand impersonation threats.