p205n[.]xyz

The domain p205n.xyz was identified as a brand_impersonation threat targeting Bet365, a well-known online betting platform. Analysis confirms the domain is currently offline, though it previously hosted content impersonating the legitimate Bet365 service, as evidenced by the page title 'welcome-BET365.' This domain poses a significant risk to users who may be deceived into entering sensitive credentials or financial information under the false pretense of accessing Bet365 services.

Technical indicators reveal multiple red flags associated with p205n.xyz. The domain was flagged by 21 out of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It was registered through Gname.com Pte. Ltd. on March 04, 2026, and resolves to the IP address 45.196.247.179, located in Hong Kong under AS140224 (Nebula Global LLC). The domain lacks an SSL certificate, further reducing its legitimacy. Additionally, it appears on one security blocklist and is actively blocked by at least one threat intelligence platform. The creation date, set in the future, suggests an attempt to evade detection or prolong operational use before expiration.

Given the current offline status of p205n.xyz, immediate user interaction risks are mitigated. However, organizations and individuals should remain vigilant, as domains of this nature often resurface under similar or slightly altered names. Recommended actions include blocking the domain and its associated IP address (45.196.247.179) at the network level, monitoring for related infrastructure (e.g., domains registered via Gname.com Pte. Ltd. or hosted on Nebula Global LLC), and educating users about the risks of brand_impersonation schemes targeting financial and betting platforms. Security teams should also review logs for any prior connections to this domain or IP to assess potential compromise.