# xs992.com — SUSPICIOUS

> xs992.com is actively used in phishing attacks targeting crypto users. Learn why this domain is risky and how to stay protected.

## Summary
PhishDestroy identifies xs992.com as an active phishing domain associated with financial scams, particularly targeting cryptocurrency users. The domain hosts a page titled "Bitpay Quant," which likely attempts to impersonate legitimate payment services to deceive victims into divulging sensitive information.

Technical analysis reveals that xs992.com was registered recently on February 23, 2026, through Gname.com Pte. Ltd. The domain resolves to IP address 188.114.96.3 and exhibits poor PageSpeed performance (32/100), a common characteristic of quickly assembled phishing sites. It has been flagged by several security blocklists and multiple antivirus vendors, indicating its malicious intent.

Currently active and posing a medium risk, xs992.com should be avoided to prevent potential data theft or financial loss. Users are advised not to interact with this domain or provide any personal or financial details. Security professionals should consider blocking this domain and monitoring related infrastructure for further threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Bitpay Quant

## Domain Intelligence
- Registered: 2026-02-23 10:05:02
- Registrar: Gname.com Pte. Ltd.
- Country: US
- IP: 188.114.96.3
- Nameservers: rafe.ns.cloudflare.com rocky.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ADMINUSLabs", "Kaspersky", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
loading

### External Scripts
- https://connect.facebook.net/en_US/fbevents.js

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c89cf-5895-7015-994d-c43d1cbc0d3c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ac125363-19ea-4f3a-afb9-654e32abcf7d
- PhishDestroy: https://phishdestroy.io/domain/xs992.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xs992.com/
Last updated: 2026-03-14