xstock[.]network

Analysis of xstock.network as of July 22, 2026 indicates that the domain is currently offline but was previously identified as a generic phishing host. The authoritative DNS records point to Cloudflare’s nameservers (james.ns.cloudflare.com, meiling.ns.cloudflare.com) and the domain was registered through Cloudflare, Inc. Resolution of the domain resolves to the IP address 158.94.208.165, which belongs to AS202412 owned by Omegatech LTD and is geolocated in Germany. The hosting provider does not present an SSL certificate, leaving traffic unencrypted. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting a lack of reputation.

VirusTotal analysis shows that four of ninety‑five scanning engines flagged the domain, indicating moderate detection across vendors. The domain appears on a single security blocklist and is specifically listed by PhishDestroy. The HTTP response returns a “404 Not Found” page title, suggesting the site is no longer serving content. While the current offline status limits immediate observation of malicious payloads or credential‑harvesting pages, the existing indicators confirm that the infrastructure was leveraged for phishing.

Defenders should continue to block the domain at network perimeter devices, update threat‑intelligence feeds with the observed IP and nameserver details, and monitor for any resurgence of activity. Additional investigation may be required to identify any associated domains that share the same IP or Cloudflare account, as the lack of SSL and low trust score imply a disposable hosting model. Until further evidence emerges, the recommendation is to keep the domain denied and to incorporate its indicators into existing phishing detection rules.