p207f[.]xyz

This report analyzes the domain p207f.xyz, which was observed impersonating the Bet365 brand. The site presented a page title of "welcome-BET365" and is categorized as a gambling scam. The primary threat is that the site attempts to deceive users into believing it is a legitimate Bet365 platform, potentially to steal credentials, financial information, or promote fraudulent gambling activities.

Technical analysis reveals the domain was created on 2026-03-10 and is hosted on IP address 45.196.247.27, located in Hong Kong and associated with AS140224 Nebula Global LLC. The domain uses an R12 SSL certificate. VirusTotal analysis shows 20 out of 95 security vendors flagged the site as malicious. It was flagged by threat intelligence sources including ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, Cluster25, and CRDF. The domain has been placed on 1 blocklist.

The domain p207f.xyz is currently reported as DOWN or OFFLINE. Based on a domain risk score of 78, it presents a high risk to users. The combination of brand impersonation, a newly created domain, and multiple security vendor detections indicates a significant threat, even though the site is not currently accessible.