xandercoin[.]com

On 24 July 2026, the domain xandercoin.com was observed as an offline brand‑impersonation site targeting the generic “across” brand. The domain was created on 15 November 2023 through NameCheap, Inc., and resolves to the IPv4 address 51.210.113.41, which is allocated to AS16276 (OVH SAS) in France. DNS resolution is handled by four nameservers: dns1.genhost.in, dns2.genhost.in, fr1.gfireservers.in, and fr2.gfireservers.in. No TLS certificate was presented, indicating that the site operated without HTTPS protection. The HTTP response returned a page titled “Xander Coin – Best Trading Platform”, aligning with the claimed purpose of a cryptocurrency trading service, but the page content has not been captured for further analysis.

Reputation checks show a Gridinsoft trust score of 0 / 100 and the domain appears on a single security blocklist. VirusTotal scans returned 10 positive detections out of 95 submitted security vendors, and the domain was subsequently blocked by the PhishDestroy service. The elevated risk rating reflects the combination of brand‑impersonation intent, low trust score, and multiple vendor detections. Infrastructure analysis confirms the hosting provider is OVH SAS, a common platform for malicious actors due to its flexible provisioning.

Defenders should continue to block the resolved IP address 51.210.113.41 and the four associated nameservers at the network perimeter. Adding xandercoin.com to local and cloud‑based URL filtering lists will prevent accidental user navigation. Although the site is currently offline, the registration information and DNS configuration remain active, allowing rapid reinstatement; therefore, continuous monitoring of the domain’s WHOIS and DNS records is advised. Organizations that reference the “across” brand should educate users about the illegitimate use of the “Xander Coin – Best Trading Platform” title and reinforce verification of TLS certificates before entering credentials.