b207c[.]xyz

Analysis of the domain b207c.xyz indicates it was actively used for brand impersonation targeting Bet365, a known gambling platform, with a focus on crypto-based wagering scams. The domain was registered on July 31, 2025, through Gname.com Pte. Ltd., and assigned nameservers ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, and ns4.1111343.com. It resolved to the IP address 45.196.247.164, hosted under AS140224 (Nebula Global LLC) in Hong Kong. No SSL certificate was present, increasing the risk of unencrypted credential harvesting.

The page title, 'welcome-BET365,' directly references the targeted brand, confirming the intent to deceive users into believing the site was an official Bet365 portal. Detection data from July 23, 2026, shows the domain was flagged by 16 of 95 security vendors on VirusTotal and appeared in six AlienVault OTX threat intelligence pulses, indicating prior malicious activity. It was also blocked by PhishDestroy and listed on one security blocklist. Scamadviser assigned a trust score of 1 out of 100, further supporting its classification as high-risk infrastructure.

As of the report date, the domain has been taken offline, though residual DNS records may persist. Defenders should treat any residual resolution attempts as indicators of compromise and monitor for re-registration or migration to new infrastructure. The absence of an SSL certificate and the use of nameservers associated with other malicious domains suggest a low-effort but deliberate phishing operation. No additional content analysis is available, so the exact mechanics of the scam beyond brand impersonation and crypto gambling remain unconfirmed.