xenoviahub[.]pro

xenoviahub.pro is confirmed as a brand impersonation phishing site. The domain does not specifically target any known brand but is designed to trick users into providing sensitive information. No drainer kit has been identified.

Infrastructure analysis reveals that xenoviahub.pro resolves to the IP address 45.9.148.51, located in the Netherlands (NL) and associated with AS49447 Nice IT Services Group Inc. The domain was created on February 21, 2026, and is registered through Unstoppable Domains Inc. It has been flagged by 13 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security professionals regarding its malicious nature. Additionally, the site appears on one security blocklist and has been blocked by the phishing protection service PhishDestroy. The SSL certificate for the domain is issued by Hestia Control Panel and is associated with the domain 8102be99.as49447.net.

As of the latest assessment, xenoviahub.pro has been taken offline, reducing the immediate risk to potential victims. However, the domain's registrar and hosting infrastructure remain active, and there is a possibility that the site could be resurrected or repurposed. Organizations and individuals are advised to continue monitoring for any signs of reactivation and to educate users on recognizing and avoiding phishing attempts. The threat level remains elevated due to the domain's history and the potential for rapid re-deployment.