iscanxlive[.]top

This domain is actively engaged in credential harvesting phishing operations targeting users through deceptive login portals. Analysis indicates the infrastructure is designed to mimic legitimate authentication interfaces, likely capturing usernames, passwords, and potentially multi-factor authentication codes. The domain presents a high-risk threat due to its active status and targeted nature of the attack vector. Infrastructure analysis reveals the domain was registered on April 27, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 172.67.131.199, hosted on Cloudflare's network (AS13335). Security vendor detections show 4 out of 95 engines on VirusTotal flagging the domain as malicious. The domain appears on three distinct security blocklists, including specialized phishing detection systems, confirming its classification as a phishing threat. Users who have visited iscanxlive.top should immediately terminate any active sessions and reset credentials for any accounts accessed through the site. All potentially exposed credentials should be considered compromised and changed across all platforms where they were reused. System administrators should add the domain and associated IP address to network blocklists. Monitoring for unauthorized access attempts or suspicious account activity is recommended for at least 30 days following exposure.