j245d[.]xyz

The domain j245d.xyz was registered on December 18, 2025 through Gname.com Pte. Ltd. and resolves to the IPv4 address 45.196.247.164, which is announced by AS140224 (Nebula Global LLC) and geolocated to Hong Kong. The authoritative name servers listed are ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, ns4., and ns1.dnsbm.com, ns2.dnsbm.com, indicating a multi‑provider DNS configuration. No TLS certificate is presented for the host, confirming the absence of HTTPS protection. The site returned an offline HTTP status at the time of analysis, preventing direct content inspection; consequently the exact page markup and any credential‑capture mechanisms remain unverified.

However, the page title that was captured prior to takedown reads "welcome-BET365", and the domain is explicitly flagged as impersonating the Bet365 betting brand, with the scam type identified as Crypto Gambling. VirusTotal records show that 13 of 95 scanning engines flagged the domain, and it appears on a single external blocklist. PhishDestroy has also listed the domain as blocked, and the Gridinsoft trust score is recorded as 0 out of 100, reinforcing the malicious assessment.

Given the combination of brand impersonation, lack of encryption, hostile vendor detections, and association with a known crypto‑gambling fraud pattern, defenders should treat j245d.xyz as a high‑confidence malicious indicator. Recommended actions include adding the domain and its resolving IP to network deny lists, updating URL filtering policies to block any HTTP/HTTPS request to the host, monitoring for DNS queries to the listed name servers, and sharing the indicator with threat‑sharing platforms. Continuous re‑evaluation is advised in case the site is re‑hosted or the underlying infrastructure is repurposed for further campaigns.