p210h[.]xyz

This domain, p210h.xyz, is identified as a high-risk phishing infrastructure specifically designed to impersonate Bet365, a well-known online gambling platform. The site was operational with the page title 'welcome-BET365,' indicating an intent to deceive users into believing they were accessing a legitimate Bet365 portal. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was actively used for credential harvesting and financial fraud targeting Bet365 customers. Analysis of p210h.xyz reveals multiple technical indicators of malicious intent. The domain was created on March 16, 2026, and registered through Gname.com Pte. Ltd., a registrar frequently associated with suspicious domains. It resolved to the IP address 103.233.249.125, located in Hong Kong and linked to hosting provider POWERLINE. Security vendors flagged the domain as malicious, with 26 out of 95 VirusTotal engines detecting it as phishing infrastructure. Additionally, the domain appeared on one security blocklist and was explicitly flagged by Google Safe Browsing for phishing. Notably, the absence of an SSL certificate further undermines any claim to legitimacy, as encrypted connections are standard for secure platforms. The current status of p210h.xyz is offline, though the infrastructure may resurface under a different domain or IP address. Organizations and individuals are advised to block the domain and its associated IP (103.233.249.125) at the network level to prevent potential re-emergence. Users who may have interacted with the site should immediately reset their Bet365 credentials and enable multi-factor authentication on all financial and gaming accounts. Security teams should monitor for similar domains registered through Gname.com Pte. Ltd. or resolving to the same IP range, as these may indicate related phishing campaigns. Proactive monitoring of blocklists and threat intelligence feeds is recommended to detect and mitigate future iterations of this threat.