r16c[.]xyz

This domain, r16c.xyz, poses a significant brand impersonation threat by mimicking Bet365, a well-known online betting platform. Visitors to this site risk exposure to credential theft, unauthorized account access, or financial fraud, as the infrastructure is designed to deceive users into believing they are interacting with the legitimate Bet365 service. The page title, 'welcome-BET365,' further reinforces this deception by closely resembling the authentic branding, increasing the likelihood of successful fraud attempts. Analysis indicates this domain was registered on October 2, 2025, through Gname.com Pte. Ltd., a registrar often associated with high-risk domains. It resolved to the IP address 45.196.247.189, hosted under AS140224 (Nebula Global LLC) in Hong Kong, a network frequently linked to malicious activity. Security vendors have flagged this domain as malicious, with 19 out of 95 engines on VirusTotal detecting it as a threat. Additionally, it appears on one security blocklist, and its SSL certificate, labeled 'R13,' lacks the credibility of trusted certificates, further signaling its fraudulent nature. If you or someone you know visited r16c.xyz, immediate action is required to mitigate potential risks. First, disconnect the device from the internet to prevent further data transmission. Run a full antivirus scan to detect and remove any malware or unauthorized access tools. Change passwords for Bet365 and any other accounts where the same credentials were used, enabling multi-factor authentication where possible. Monitor financial statements and account activity for unauthorized transactions, and report any suspicious activity to the legitimate service provider. Users should also clear browser caches and cookies to eliminate residual tracking data from the fraudulent site.