MALICIOUS — CRITICAL
Analyse phishing et sécurité de xexbestpro.com
xexbestpro[.]
This domain, xexbestpro.com, is identified as a brand impersonation phishing site targeting Google users.
- VirusTotal
- 10/91
- Blocklists
- 2 · MetaMask, SEAL
- Disponibilité
- Contenu indisponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
xexbestpro.com — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Google; Type d'arnaque : Brand Impersonation. Résumé des preuves: VirusTotal 10/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 93/100. Bureau d’enregistrement: Gname.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
This domain, xexbestpro.com, is identified as a brand impersonation phishing site targeting Google users. Analysis indicates the domain was designed to mimic legitimate Google services, likely to harvest credentials or distribute malicious payloads under the guise of official branding. The page title "XEX" suggests an attempt to deceive users into believing they are interacting with a trusted platform, while the underlying infrastructure supports high-risk activities such as credential theft or malware distribution.
Evidence supporting this assessment includes detection by 9 out of 95 security vendors on VirusTotal, registration through Gname.com Pte. Ltd. on April 28, 2026, and presence on three security blocklists. The domain resolved to the IP address 188.114.97.3 and employed technologies such as Vue.js, HSTS, and Cloudflare, which are often leveraged to evade detection or enhance phishing site credibility. Additionally, the domain has been blocked by multiple security frameworks, further confirming its malicious intent.
Users who visited xexbestpro.com should immediately revoke any credentials entered on the site and scan their devices for malware. If financial or sensitive information was submitted, monitor accounts for unauthorized activity and consider reporting the incident to relevant authorities. Browser-based security tools or network-level blocking should be employed to prevent future access to this domain or related infrastructure.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Couverture des données14 recorded checks
Signaux de sécurité
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 5 identified
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org Confiance à 100 %HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confiance à 100 %Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confiance à 100 %Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confiance à 100 %HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confiance à 100 %Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of xexbestpro.com · checked Jun 26, 2026
Données factuelles et rapports externesIndependent lookups and source reports
PD-20260428-3EF0F3 Recipient: complaint@gname.com Victim safety and official reportingImmediate actions and verified reporting channels
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.