f230u[.]xyz
“welcome-BET365”
f230u.xyz — Konten tidak tersedia. Peniruan identitas merek: Bet365; Jenis penipuan: Crypto Gambling. Ringkasan bukti: VirusTotal 22/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, CRDF); URLQuery 5 alerts; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This report details the technical threat posed by the domain f230u.xyz. The site presented a page title of "welcome-BET365" and was identified as a gambling scam, impersonating the legitimate Bet365 brand. The primary threat is that the domain was designed to deceive users into believing they were accessing an official Bet365 gambling platform, likely to steal login credentials, financial information, or facilitate fraudulent gambling activities.
Technical analysis reveals that the domain was flagged by 22 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, and CRDF, and was present on one blocklist. The domain was registered through Gname.com Pte. Ltd. and created on 2026-02-22. It resolved to IP address 45.196.247.27, hosted in Hong Kong by AS140224 Nebula Global LLC, and had no SSL certificate. The nameservers were ns1.1111343.com, ns1.dnsbm.com, ns2.1111343.com, ns2.dnsbm.com, ns3.1111343.com, and ns4.
As of the analysis, the domain f230u.xyz is down and offline. The risk level is assessed as high due to the confirmed impersonation of a major brand, the high number of antivirus detections, and the lack of SSL encryption. The domain's recent creation date and presence on blocklists further indicate malicious intent.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | f230u.xyz |
malicious | Sinkholed |
| DNS4EU | f230u.xyz |
malicious | Sinkholed |
| Cloudflare DNS | f230u.xyz |
malicious | Sinkholed |
| OpenDNS | f230u.xyz |
phishing | Phishing Block |
| Hagezi Threat Feed | f230u.xyz |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260222-BFC3EF Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive