# b251j.xyz — MALICIOUS

> b251j.xyz is identified as a high-risk phishing domain. Avoid interaction and report suspicious activity to protect your data.

## Summary
PhishDestroy identifies b251j.xyz as a high-risk generic phishing threat designed to deceive users and steal sensitive information. This domain poses significant danger due to its malicious intent.

The domain was registered on February 26, 2026, through Gname.com Pte. Ltd. and resolves to IP address 45.196.247.25. VirusTotal flags 10 out of 95 security vendors for this domain, supporting its suspicious nature. The infrastructure suggests a newly created setup aimed at phishing attacks.

Currently active, b251j.xyz should be avoided entirely. Users are advised not to click any links or provide personal details. Reporting this domain to your cybersecurity team or blocking it on network firewalls can help mitigate exposure risks associated with this threat. (Unique seed: c27d35)

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: welcome-BET365

## Domain Intelligence
- Registered: 2026-03-09 01:07:01
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 45.196.247.25
- IP Country: HK
- IP City: Hong Kong
- IP Org: AS140224 Nebula Global LLC
- Nameservers: ["ns1.1111343.com", "ns2.1111343.com", "ns3.1111343.com", "ns4.1111343.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 18 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CRDF", "CyRadar", "DNS8", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Netcraft", "OpenPhish", "SOCRadar", "Sophos", "Trustwave", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/Lh5by506/eefcb4354216.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3e28044f-ef80-448d-90fa-70e244b93b0c
- Wayback Machine: https://web.archive.org/web/https://b251j.xyz
- PhishDestroy: https://phishdestroy.io/domain/b251j.xyz/
- LLM endpoint: https://phishdestroy.io/domain/b251j.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/b251j.xyz/
Last updated: 2026-03-19