f232f[.]xyz
“welcome-BET365”
Evidence Summary
This domain, f232f.xyz, poses a specific threat of brand impersonation, mimicking the online presence of Bet365. The threat is designed to deceive users into believing they are interacting with the legitimate Bet365 website, potentially leading to the disclosure of sensitive information such as login credentials or financial data.
Analysis indicates that f232f.xyz has been flagged by 21 out of 95 security vendors on VirusTotal, highlighting its suspicious nature. The domain was registered through Gname.com Pte. Ltd. on February 20, 2026, and it has also appeared on 1 security blocklist. The domain resolves to the IP address 45.196.247.26, which is located in Hong Kong and is part of the AS140224 Nebula Global LLC network. The SSL certificate used is R13, which does not provide strong assurance of the domain's authenticity.
If users have visited f232f.xyz, they should immediately change any passwords that were entered on the site, particularly those associated with Bet365 or other online accounts. Users are advised to monitor their financial statements for any unauthorized transactions and report any suspicious activity to their financial institutions. Additionally, users should be cautious of any links or communications that appear to be from Bet365 and verify the authenticity of the website by accessing it directly through a trusted source or official URL.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Forensic Intelligence
Casino / Gambling License Verification
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive