0xmachi[.]xyz

The domain 0xmachi.xyz was registered on August 29, 2024 through Dynadot LLC and is currently taken offline. DNS resolution points to the IP address 75.2.18.233, which belongs to AS16509, Amazon.com, Inc., located in the United States. The authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net, and no SSL certificate is present for the host, indicating the site operated over plain HTTP when active.

Reputation services assign extremely low trust scores: Scamadviser rates the domain 5 out of 100, and Gridinsoft assigns a score of 0 out of 100. The domain appears on two security blocklists, PhishDestroy and ScamSniffer, and was flagged by two of ninety‑five VirusTotal scanners, reinforcing the suspicion of malicious intent. The page title returned by the server is identical to the domain name, "0xmachi.xyz," providing no additional context about the intended victim or lure.

While the exact phishing campaign or impersonated brand cannot be confirmed from the available data, the combination of a recent registration, low trust metrics, blocklist inclusion, and detection by multiple security vendors suggests a purposeful effort to host fraudulent content. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IP and nameservers, and consider updating threat‑intel feeds with the observed indicators. Further analysis of any historic HTTP traffic or payloads captured before the site went offline would be required to determine the specific phishing vector and victim profile.