r33d[.]xyz

The domain r33d.xyz has been identified as a confirmed phishing site specifically targeting users of the Bet365 brand. This site is currently offline, having been taken down after its malicious nature was discovered. It was registered on December 24, 2025, through Gname.com Pte. Ltd., and was designed to deceive users into believing they were accessing the legitimate Bet365 platform.

Security analysis reveals that r33d.xyz was flagged by 15 out of 95 security vendors on VirusTotal, indicating a high level of malicious consensus. The domain was also found in one threat intelligence pulse on AlienVault OTX and appears on one security blocklist. The site resolved to IP address 45.196.247.147 and used an R13 SSL certificate, which may have given it a false sense of legitimacy. The page title was "welcome-BET365," a clear attempt to impersonate the betting brand.

Given that the site is now offline, the immediate risk to users is reduced, but visitors who interacted with the site may have exposed personal information. Users should ensure they only access Bet365 through the official website and report any suspicious domains. It is also advisable to monitor accounts for unusual activity and consider changing passwords if any credentials were entered on r33d.xyz.