xanobit[.]com
“Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Xanobit”
साक्ष्य सारांश
Analysis indicates that the domain xanobit.com was registered on 21 February 2026 through Tucows Domains Inc. The authoritative nameservers ns1.renewyourname.net and ns2.renewyourname.net resolve the domain to the IP address 104.21.42.118, which is part of Cloudflare, Inc. (AS13335) and geolocated to the United States. The web server presents an Nginx/OpenResty stack and serves a TLS certificate issued by Go Daddy Secure Certificate Authority – G2, originally signed by GoDaddy.com, Inc. The page title returned when the site was reachable reads “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Xanobit”, indicating a claim to operate a cryptocurrency exchange and explicitly referencing Ethereum. The domain is classified as a crypto‑scam that impersonates the Ethereum brand. Threat intelligence shows that ten of ninety‑three antivirus and URL‑reputation engines on VirusTotal flag the domain as malicious, and the Gridinsoft trust score is 1 / 100, reflecting an extremely low reputation.
The domain appears on a single public blocklist and is actively blocked by PhishDestroy. Current HTTP status is offline, confirming that the site is no longer serving content at the time of analysis. Evidence confirms a deliberate infrastructure setup designed to lend credibility through Cloudflare’s CDN, a reputable SSL certificate, and a page title that mimics legitimate exchange services. However, no payload, phishing landing page, or credential‑harvesting mechanism has been captured, leaving the exact malicious behavior undefined.
Defenders should add 104.21.42.118 to network‑level deny lists, block the domain xanobit.com in DNS filtering solutions, and monitor for any future re‑hosting on the same IP or nameservers. Continuous observation of the associated Cloudflare ASN and the renewyourname.net name servers is advised, as threat actors frequently recycle these resources.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260125-7F4796- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain xanobit.com is actively engaged in phishing activities, which constitutes a clear violation of your AUP that prohibits illegal activities, fraud, and deception.
Terms of Service (TOS): The ongoing fraudulent use of this domain violates your TOS, which reserves the right to suspend or terminate services for any activities that contravene your policies.
Applicable Laws (KN):
Computer Misuse Act (Cap. 16): This law criminalizes unauthorized access to computer systems and data, which is relevant given the phishing activities associated with xanobit.com.
Electronic Crimes Act (Act No. 8 of 2013): This legislation addresses various forms of cybercrime, including phishing, and provides for penalties against those who engage in such activities.
Regulatory Note: Failure to take appropriate action against this domain may expose your organization to legal liability and regulatory scrutiny. Immediate compliance with your AUP and TOS is imperative to mitigate potential risks.
Data Coverage
सुरक्षा संकेत
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
VirusTotal
10 → 9
-
VirusTotal
10 → 9
-
VirusTotal
10 → 9
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of xanobit.com · checked Mar 2, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।