h88a[.]xyz

This report details a threat domain, h88a.xyz, which impersonates the Bet365 brand. The page title "welcome-BET365" and the "gambling" scam type indicate the site was designed to mimic a legitimate betting platform, likely to harvest user credentials, financial information, or facilitate fraudulent gambling activity.

Technical analysis reveals 11 out of 95 VirusTotal vendors flagged the domain as malicious. It is flagged by alphaMountain.ai, CRDF, CyRadar, Emsisoft, and Forcepoint ThreatSeeker, and appears on one blocklist. The domain was created on 2026-02-21 and is hosted on IP address 45.196.247.146, located in Hong Kong, under AS140224 Nebula Global LLC. The SSL certificate is R12. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 78.

The domain is currently DOWN or OFFLINE, but its creation date and risk score indicate it was a recently established, high-risk asset. The combination of brand impersonation, low trust rating, and multiple vendor detections confirms a significant threat to users who may encounter it when active.