xstock.network

VirusTotal analysis shows that four of ninety‑five scanning engines flagged the domain, indicating moderate detection across vendors. The domain appears on a single security blocklist and is specifically listed by PhishDestroy. The HTTP response returns a “404 Not Found” page title, suggesting the site is no longer serving content. While the current offline status limits immediate observation of malicious payloads or credential‑harvesting pages, the existing indicators confirm that the infrastructure was leveraged for phishing.

Defenders should continue to block the domain at network perimeter devices, update threat‑intelligence feeds with the observed IP and nameserver details, and monitor for any resurgence of activity. Additional investigation may be required to identify any associated domains that share the same IP or Cloudflare account, as the lack of SSL and low trust score imply a disposable hosting model. Until further evidence emerges, the recommendation is to keep the domain denied and to incorporate its indicators into existing phishing detection rules.