84627[.]xyz

This domain, 84627.xyz, is flagged as a brand impersonation site specifically targeting Bet365, a well-known online betting platform. Analysis indicates the site is designed to deceive users into believing they are interacting with the legitimate Bet365 service, likely for the purpose of credential theft or financial fraud. The page title, 'welcome-BET365,' directly mimics the branding of the targeted entity, reinforcing the impersonation attempt. Infrastructure analysis reveals several critical technical indicators. The domain was registered on January 08, 2026, through Gname.com Pte. Ltd., and currently resolves to the IP address 45.196.247.146, located in Hong Kong under AS140224 (Nebula Global LLC). Security vendor assessments on VirusTotal show 12 out of 95 vendors flagging the domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate is identified as R13, which may indicate the use of automated or low-cost certificate issuance practices often associated with fraudulent sites. As of the latest assessment, 84627.xyz has been taken offline, reducing immediate exposure to potential victims. However, the infrastructure remains a residual risk, as the domain could be reactivated or repurposed for further malicious activity. Users who may have interacted with this domain are advised to monitor for unauthorized account access, reset credentials for any associated services, and report the incident to relevant fraud prevention authorities. Organizations should update blocklists to include this domain and its associated IP address to mitigate future threats.