xfortune[.]cc
فحص التصيد والأمان للنطاق xfortune.cc
“Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain”
xfortune.cc — المحتوى غير متوفر (HTTP 502). انتحال العلامة التجارية: Genericcrypto; نوع الاحتيال: Crypto Scam. ملخص الأدلة: VirusTotal 18/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 100/100. مسجّل النطاق: Global Domain Group.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Analysis as of July 23 2026 indicates that xfortune.cc is currently offline but exhibits multiple indicators of a high‑risk crypto phishing operation. The site was registered on 21 February 2026 through Global Domain Group LLC and resolves to 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. DNS resolution uses the Cloudflare authoritative nameservers chance.ns.cloudflare.com and olivia.ns.cloudflare.com. The SSL certificate presented is issued by Google Trust Services under the WE1 identifier, which is typical for Cloudflare‑proxied services. The page title retrieved before takedown reads “Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain,” matching the classified scam type of a crypto‑focused fraud.
Automated analysis on VirusTotal shows that 18 of 95 antivirus and URL‑reputation engines flagged the domain, confirming malicious behavior. Additional security products have blocked the domain, including PhishDestroy, MetaMask, and SEAL. The site also appears on three external blocklists, reinforcing its reputation as a phishing target. Infrastructure inspection reveals the use of third‑party tracking technologies such as Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights, which are commonly employed to gather visitor data and monetize traffic. The underlying phishing kit has been identified as the “Gambler Scam” package, a known template for cryptocurrency‑themed lures.
Gridinsoft’s trust score for the domain is 1 / 100, indicating extreme lack of credibility. While the domain is presently offline, the combination of a recent registration date, Cloudflare‑based hosting, low trust score, multiple vendor detections, and inclusion on blocklists suggests an active campaign that may have been operating for a short window.
مؤشرات الأمان
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | xfortune.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | xfortune.cc |
malicious | Sinkholed |
| DNS4EU | xfortune.cc |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
سجل بلاغات إساءة الاستخدام · 9 stored reports over 62 days · click to expand
-
Report #1 ICANN CC 350h still active Mar 6, 2026 · 10:57 UTCESCALATION #2 (350h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 1256h still active Apr 13, 2026 · 07:26 UTCESCALATION #3 (1256h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 1353h still active Apr 17, 2026 · 08:13 UTCESCALATION #4 (1353h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 1487h still active Apr 22, 2026 · 22:14 UTCESCALATION #5 (1487h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 1533h still active Apr 24, 2026 · 20:09 UTCESCALATION #6 (1533h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 1578h still active Apr 26, 2026 · 17:17 UTCESCALATION #7 (1578h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 1627h still active Apr 28, 2026 · 18:33 UTCESCALATION #8 (1627h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #9 ICANN CC 1724h still active May 2, 2026 · 19:36 UTCESCALATION #9 (1724h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #10 ICANN CC 1826h still active May 7, 2026 · 01:51 UTCESCALATION #10 (1826h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
التقنيات · 4 identified
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comتحليل VirusTotal
الأدلة المؤرشفة
الأدلة والتقارير الخارجية
PD-20260219-5B56CE Recipient: abuse@globaldomaingroup.com هل تأثرت بهذا الموقع؟
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.
تحقق من أي نطاق
تحليل التهديدات باستخدام قائمة الحظر المخزنة، وWHOIS، وDNS، وأدلة الفحص العامة
امسح الآنالإبلاغ عن محاولة تصيد احتيالي
أرسل النطاقات المشبوهة إلى قاعدة بيانات التهديدات الخاصة بنا — ساهم في حماية المجتمع
إبلاغتحديثات فورية حول التهديدات
تقارير التصيد الاحتيالي الأخيرة وتغييرات التوفر الملحوظة
مراقبةابقَ على اطلاع، وابقَ آمنًا
راقب التهديدات في الوقت الفعلي أو اعترض على هذا الإدراج إذا كنت تعتقد أنه إنذار كاذب