f213g[.]xyz

Analysis of f213g.xyz indicates this domain was actively impersonating Bet365 in a crypto gambling scam operation. Registered on December 9, 2025, through Gname.com Pte. Ltd., the domain resolved to IP 45.196.247.160, hosted on AS140224 (Nebula Global LLC) in Hong Kong. The page title 'welcome-BET365' explicitly confirms the brand impersonation target. Infrastructure checks reveal the domain appeared on one security blocklist (PhishDestroy) and was flagged by 14 of 95 security vendors in VirusTotal scans.

AlienVault OTX recorded one threat intelligence pulse referencing this domain. The SSL certificate was issued under the R12 root, a common choice for short-lived phishing infrastructure. Gridinsoft assigned a trust score of 0/100, consistent with confirmed malicious domains. As of July 23, 2026, the domain is offline, though defenders should treat any reactivation as high-risk.

The available evidence—including the page title, registration details, hosting provider, and detection counts—supports classification as a crypto gambling scam impersonating Bet365. No additional content analysis (e.g., page structure, scripts, or backend services) is available from the current data. Defenders should block the domain and IP, monitor for re-registration under similar patterns, and cross-reference with Bet365's official abuse reporting channels for takedown validation.