p14f[.]xyz

The domain p14f.xyz was registered on February 2, 2025 through Gname.com Pte. Ltd. and is delegated to four name servers under the 1111343.com hierarchy. DNS resolution directs the domain to the IPv4 address 45.196.247.145, which belongs to ASN140224 (Nebula Global LLC) and is geolocated in Hong Kong. The site presented a page title of "welcome-BET365" and was classified as a crypto gambling impersonation of the Bet365 brand. No TLS certificate was observed, indicating that the service operated without HTTPS protection.

Analysis by VirusTotal shows that 13 of 95 scanned security vendors flagged the domain, reflecting a moderate detection consensus. The domain is listed on a single security blocklist and has been blocked by the PhishDestroy platform, reinforcing its malicious reputation. Additionally, AlienVault OTX references the domain in two distinct threat‑intel pulses, providing further corroboration of its use in malicious campaigns. Current monitoring indicates the domain has been taken offline, but its infrastructure—specifically the hosting IP and registrar details—remains observable for attribution.

Defenders should continue to block the domain at network perimeter devices, update URL filtering policies, and monitor for any re‑registration attempts using the same registrar or hosting provider. Threat hunters should query the associated IP address 45.196.247.145 for any residual activity and correlate logs for connections to that address, especially from assets that may interact with Bet365 services. The lack of SSL and the presence of a brand‑specific page title suggest a low‑effort impersonation, yet the detection history warrants elevated vigilance for related crypto‑gambling scams targeting Bet365 customers.