b256f.xyz
“b256f.xyz”
Evidence Summary
The domain b256f.xyz has been identified as an active generic phishing threat targeting unsuspecting users. It does not impersonate a specific brand but employs generic phishing tactics to deceive individuals into divulging sensitive data or credentials. The current risk level is elevated, indicating a notable potential for harm if users engage with this domain or its associated content.
Technical analysis reveals that b256f.xyz was created recently on March 25, 2026, and is registered through Gname.com Pte. Ltd. It resolves to the IP address 122.114.10.13. VirusTotal scanning flags this domain by 8 out of 95 security vendors, a significant detection rate that corroborates the phishing risk. This detection count combined with the domain's young age suggests recent malicious activity that merits caution. There are no additional trust scores or blocklist counts publicly noted at this time.
Given its active status and elevated risk rating, users should refrain from clicking links or submitting any personal or financial information on b256f.xyz. Organizations are advised to block this domain at network perimeters and update security filters to prevent access. Continuous monitoring is recommended as phishing campaigns often evolve rapidly. Educating users about the risks of interacting with unknown domains and verifying sender legitimacy before responding is critical to minimizing exposure to this threat.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | img.esportsdata.cc |
malicious | Sinkholed |
| DNS4EU | img.esportsdata.cc |
malicious | Sinkholed |
| DNS4EU | ssl.gfw301.xyz |
malicious | Sinkholed |
| Cloudflare DNS | b256f.xyz |
malicious | Sinkholed |
| OpenDNS | b256f.xyz |
phishing | Phishing Block |
| DNS4EU | b256f.xyz |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260330-329454- Captured page title
- welcome-BET365
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 10, 2026
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Forensic Intelligence
VirusTotal Analysis
Evidence & External Reports
PD-20260330-329454 Recipient: abuse@gainet.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive