f206n[.]xyz

The domain f206n.xyz was registered on February 21, 2026 and is currently listed as offline. Analysis shows the domain resolves to the IP address 45.196.247.162, which belongs to the Nebula Global LLC network (AS140224) located in Hong Kong. The hosting provider is identified by the Autonomous System number and geographic location, confirming the infrastructure is hosted in the HK region. The site presents a page title of "welcome-BET365", indicating an explicit impersonation of the Bet365 brand and a declared scam type of crypto gambling.

Security telemetry indicates the domain appears on a single blocklist, specifically PhishDestroy, and has been observed in fourteen AlienVault OTX threat pulses. VirusTotal scans have flagged the domain on thirteen of ninety‑three security vendor engines, demonstrating moderate detection consensus. The SSL certificate associated with the site is labeled "R13", suggesting the use of a TLS configuration that may be outdated or misconfigured. Gridinsoft’s trust scoring system assigns a rating of zero out of one hundred, reflecting the highest level of distrust.

Although the site is offline, defenders should continue to enforce blocks on the domain and the associated IP address, update web filtering rules, and monitor for any re‑activation attempts. Additional monitoring of related infrastructure, such as other domains resolving to the same IP or ASN, is advisable. The limited public evidence—page title, brand target, and detection counts—provides sufficient justification for elevated risk classification, but further content analysis would be required to detail the exact phishing payload or credential collection mechanisms if the site reappears.