xpdcoin[.]digital

As of July 12, 2026, the domain xpdcoin.digital is flagged as a high-risk generic phishing site. This domain has been registered through PublicDomainRegistry.com and created on March 11, 2026. The domain resolves to an IP address located in the United States, specifically 104.21.93.20, which is associated with Cloudflare, Inc. (AS13335). The SSL certificate for the domain is issued by Let's Encrypt, indicating a common practice among phishing sites to appear more legitimate by using trusted certificate authorities. Infrastructure analysis reveals that the domain is protected by Cloudflare services, including Cloudflare Browser Insights and HTTP/3, which can obscure the true origin and nature of the site's traffic. The domain's page title, 'Just a moment...', suggests that it may be using Cloudflare's security measures to delay or block access, which is often a tactic employed by malicious actors to evade detection and analysis. The domain has been blocked by multiple security solutions, including PhishDestroy and SEAL, and appears on three security blocklists, further indicating its involvement in malicious activities. While VirusTotal reports that 2 out of 95 security vendors flag this domain, this low detection rate does not necessarily indicate safety, as phishing sites can quickly morph to avoid detection. Gridinsoft's trust score of 0/100 and the domain's presence in 11 AlienVault OTX threat intelligence pulses highlight the significant risk associated with xpdcoin.digital. Defenders should exercise extreme caution when encountering this domain and consider implementing additional security measures to protect users from potential phishing attacks. Monitoring for any suspicious activity related to this domain and educating users about the risks of phishing are crucial steps in maintaining network security.