s96c[.]xyz

The domain s96c.xyz is identified as a high-risk brand impersonation threat targeting Bet365 and is currently offline. The specific threat type is brand impersonation, which involves the creation of a deceptive web page to trick users into divulging sensitive information.

Analysis indicates that s96c.xyz has been flagged by 18 out of 95 security vendors on VirusTotal, highlighting its potential to cause harm. The domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 45.196.247.147, which is located in Hong Kong under the Autonomous System AS140224 Nebula Global LLC. The domain was created on December 20, 2025, and appears on one security blocklist, specifically PhishDestroy. The page title 'welcome-BET365' further supports the impersonation of Bet365, and the domain lacks an SSL certificate, which is a common feature of legitimate websites.

Given the current offline status, it is recommended that organizations and users continue to monitor for any reactivation of this domain. Additionally, implementing DNS-based blocking or web filtering solutions to prevent access to s96c.xyz can enhance security. Regularly updating user awareness training to include the latest tactics used in brand impersonation attacks is also advised.