b248w[.]xyz

The domain b248w.xyz is flagged as a confirmed brand impersonation scam targeting the reputable online betting platform Bet365. Analysis indicates that the domain impersonates Bet365 to deceive users and potentially steal sensitive information. No specific drainer kit is reported for this domain.

Infrastructure analysis reveals that b248w.xyz has a VirusTotal score of 16/95, indicating that a significant number of security vendors recognize the domain as malicious. The domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 45.196.247.27, which is located in Hong Kong and associated with AS140224 Nebula Global LLC. The domain was created on February 19, 2026, and appears on 1 security blocklist. Additionally, the domain is blocked by PhishDestroy, a known security service.

The current status of b248w.xyz is offline, which suggests that it has been taken down in response to security alerts and blocklists. However, the domain's offline status does not eliminate the risk entirely, as it could be reactivated in the future. Security teams are advised to monitor this domain and ensure that it remains offline. Users should avoid visiting the site and report any suspicious activity to their preferred security service. The elevated risk level indicates that this domain poses a significant threat, and proactive measures are necessary to protect against potential future attacks.