# xslots.cc — SUSPICIOUS

> xslots.cc hosts a fake gaming site stealing credentials. Domain registered March 12, 2026, with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies xslots.cc as an active credential phishing domain impersonating a gaming platform to harvest user login details. The domain leverages a homograph attack, mimicking the legitimate 'xslots.com' brand to deceive victims into entering sensitive credentials. No known drainer kit or sophisticated obfuscation was detected during analysis, suggesting reliance on social engineering for initial compromise.

Technical indicators confirm xslots.cc resolves to IP 172.67.210.140 and is registered via Global Domain Group LLC. VirusTotal currently shows 0/95 detections despite the domain's active status, while Google Safe Browsing (GSB) has not yet flagged it. The domain was created on March 12, 2026, indicating a recent threat with minimal historical data. No blocklists currently include this domain, leaving users and organizations vulnerable to exploitation.

As of this advisory, xslots.cc remains active with a 'high' risk rating. Immediate actions include blocking the domain at the network perimeter and updating endpoint detection rules. Users are advised to verify URLs before entering credentials and report suspicious activity. Remaining risk is elevated due to the domain's use of a trusted SSL certificate (Let's Encrypt) and low detection rates, necessitating continued monitoring and proactive threat hunting.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-12 12:53:06
- Registrar: Global Domain Group LLC
- IP: 172.67.210.140

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/xslots.cc
- PhishDestroy: https://phishdestroy.io/domain/xslots.cc/
- LLM endpoint: https://phishdestroy.io/domain/xslots.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xslots.cc/
Last updated: 2026-04-04