b262n[.]xyz

The domain b262n.xyz has been assessed as an elevated risk for brand impersonation, specifically targeting Bet365. This assessment is based on the domain's offline status, its creation date, and the detection rates by security vendors.

Infrastructure analysis reveals that b262n.xyz resolves to the IP address 154.39.104.140, which is located in Hong Kong and associated with StarCloudGlobal-HK. The domain was registered through Gname.com Pte. Ltd. on April 27, 2026. VirusTotal reports that 24 out of 95 security vendors flag this domain as malicious. Additionally, the domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate for b262n.xyz is issued by Let's Encrypt under the R13 certificate authority, which is a common practice for phishing domains to appear legitimate.

To mitigate the risks associated with Bet365 impersonation phishing, organizations and users should ensure that all communications and transactions with Bet365 are conducted through official channels and verified URLs. Security teams should update their blocklists to include b262n.xyz and monitor for similar domain patterns. Users are advised to be wary of unsolicited emails or messages containing links to unfamiliar domains and to report any suspected phishing attempts to their security teams immediately.