90462[.]xyz

This domain, 90462.xyz, is flagged as a brand impersonation phishing site targeting Bet365, a well-known online betting platform. The page title, welcome-BET365, explicitly mimics the legitimate brand to deceive users into engaging with fraudulent content. No crypto drainer kit signatures were detected, but the domain’s infrastructure and naming conventions align with typical credential harvesting or fake login schemes designed to capture user account details. Analysis indicates the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with abusive registrations. It resolves to the IP address 45.119.97.37, hosted under AS133861 (SonderCloud Limited), an autonomous system with a history of hosting malicious domains. VirusTotal detections show 19 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. No SSL certificate was present, further reducing trust indicators for end users. The domain has been taken offline, likely due to detection and reporting by security vendors or hosting provider intervention. However, residual risk remains as threat actors may re-deploy the domain or shift infrastructure to evade detection. Organizations and users are advised to monitor for related domains registered under the same registrar or resolving to the same IP range. Blocking the domain and its associated IP at the network level is recommended to prevent potential re-emergence or lateral movement within compromised environments.