p200b[.]xyz

The domain p200b.xyz was registered on 21 February 2026 and is currently resolved to the IPv4 address 103.233.249.125, which belongs to the POWER LINE DATACENTER network (AS132839) hosted in Hong Kong. The site previously served a page whose HTML title was reported as “welcome‑BET365”, indicating an attempt to impersonate the Bet365 betting brand. The associated scam type is listed as crypto gambling, suggesting that the infrastructure was intended to lure victims into cryptocurrency‑based wagering schemes under the guise of a legitimate Bet365 experience. Multiple security vendors have flagged the domain. VirusTotal recorded detections from 16 of 95 scanning engines, confirming a consensus of malicious classification.

The Gridinsoft trust score of 0 out of 100 further underscores the lack of credibility. The domain appears on at least one public blocklist and has been added to the PhishDestroy blocklist, demonstrating that defensive feeds are already propagating the indicator. An AlienVault OTX pulse references the domain in a single threat‑intel feed, providing additional corroboration. TLS analysis shows the site was using an SSL certificate identified as “R13”, which is typical of low‑cost or automatically issued certificates often employed by fraudulent sites. The current operational status is reported as offline, which may be a temporary takedown or a shift to a different hosting location.

Because the site is no longer reachable, direct content inspection is not possible; therefore, the exact page layout, form fields, or malicious payloads remain unverified. Defenders should continue to enforce blocks on the hostname p200b.xyz and the associated IP address 103.233.249.125 across network perimeter and endpoint controls. The domain should be added to threat‑intel feeds and URL filtering policies that target brand‑impersonation activity against Bet365. Monitoring for re‑registration of the same second‑level domain or for similar naming patterns (e.g.