x-chat[.]us

The domain x-chat.us is currently classified as a high‑risk generic phishing site and remains active as of 12 July 2026. The only visible artifact is the page title “Home / X‑Chat”, which returns HTTP 200. No additional site content has been examined, so the exact phishing vector is not yet confirmed. Infrastructure analysis shows the domain was registered on 28 July 2025 through NameCheap, Inc. and is served via Cloudflare’s network (AS13335) from the IP address 172.67.214.132, located in the United States. The domain uses Cloudflare’s DNS with nameservers kianchau.ns.cloudflare.com and leia.ns.cloudflare.com and presents a TLS certificate issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint. Threat intelligence sources place x‑chat.us on a single security blocklist and record it as blocked by PhishDestroy. VirusTotal analysis reports a single positive detection out of 95 scanned security vendors, confirming at least one scanner identified malicious behavior. The site is reachable over HTTP/3, a protocol often leveraged by fast‑flux phishing operators to improve performance and evade traditional inspection. While the technical footprint confirms a phishing‑oriented infrastructure, the absence of publicly disclosed payload samples or credential‑harvesting pages leaves the specific attack methodology uncertain. No evidence has been found linking the domain to additional command‑and‑control servers, malware drops, or credential‑exfiltration services. Defenders should add x‑chat.us to network blocklists, enforce DNS sink‑holing, and monitor outbound connections to the associated Cloudflare IP range. Continuous scanning with updated URL‑reputation feeds is advised, as the low VirusTotal score suggests that further detections may emerge. Incident response teams should treat any user interaction with the domain as potentially compromised and initiate standard credential‑reset procedures.