# xpm06.top — SUSPICIOUS

> xpm06.top is linked to generic phishing activities with low risk. Stay vigilant and avoid interaction with this domain to protect your data.

## Summary
PhishDestroy has identified xpm06.top as a domain engaged in generic phishing activities, classified with a low-risk level. While it does not appear to impersonate any specific brand or service, the domain’s presence in phishing infrastructure warrants caution. This classification is based on its behavior and association with phishing tactics rather than targeted brand mimicry.

Technical analysis reveals that xpm06.top was registered recently on March 7, 2026, through NiceNIC International Group Co., Limited. The domain resolves to IP address 172.67.159.44 and has a minimal detection footprint, flagged by only one out of 95 security vendors on VirusTotal. Additionally, it appears on a single security blocklist. The domain’s page currently returns a '522: Connection timed out' error, indicating connectivity issues or intentional shutdown.

Currently, xpm06.top is offline, reducing immediate threat exposure. However, users and security teams should remain alert to the potential for such domains to return or be replaced by similar phishing sites. PhishDestroy recommends monitoring related infrastructure and maintaining awareness to prevent credential theft or other phishing-related compromises.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: 522: Connection timed out

## Domain Intelligence
- Registered: 2026-03-07 01:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.159.44
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: earl.ns.cloudflare.com peaches.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc5c7-1f22-7316-87dc-b08eeed03ceb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fd2728bc-c622-48d4-bd94-5261d0ce2255
- Wayback Machine: https://web.archive.org/web/https://xpm06.top
- PhishDestroy: https://phishdestroy.io/domain/xpm06.top/
- LLM endpoint: https://phishdestroy.io/domain/xpm06.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xpm06.top/
Last updated: 2026-03-19