b248u[.]xyz

The domain b248u.xyz was created on February 24, 2026 and resolves to the IP address 45.196.247.179, which is hosted in Hong Kong under autonomous system AS140224 belonging to Nebula Global LLC. The site presented the page title "welcome-BET365," directly referencing the Bet365 brand and was classified as a crypto gambling scam. Security telemetry indicates that 14 of 93 VirusTotal vendors flagged the domain as malicious, and it is currently listed on one external blocklist.

PhishDestroy has also recorded the domain as blocked, and an AlienVault OTX pulse includes a single reference to the same indicator. The TLS certificate was rated R12, and the site is now taken offline, confirming that the active phishing infrastructure has been disrupted.

Defenders should incorporate b248u.xyz and its associated IP address into DNS and URL filtering policies, monitor for any re‑registration attempts or alternative hosting of the same payload, and ensure that endpoints block connections to the identified IP range. Continuous threat‑intel feeds should be consulted for any resurgence of the same campaign, and incident response teams should be prepared to investigate related crypto gambling attempts that may target users of the Bet365 service.