distrbution-inspect[.]xyz

The domain distrbution-inspect.xyz was registered on 13 August 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IP address 172.67.142.222, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site served an SSL certificate identified only as “WE1”, and the Gridinsoft trust engine assigned a score of 0 out of 100, indicating a completely untrusted reputation. The only visible page title retrieved before the site was taken offline reads “Inspect Substrike | Start Mining $TAO in Minutes”, matching the classification of a crypto‑mining scam that promises rapid earnings of the $TAO token. VirusTotal scanned the domain and recorded two positive detections out of ninety‑three submitted security vendors, confirming that at least a small subset of scanners view the site as malicious.

Independent threat‑intelligence providers have added the domain to a single security blocklist and PhishDestroy reports it as blocked. No additional public blocklists, Safe Browsing entries, or Open Threat Exchange (OTX) references are currently listed for this domain. Analysis indicates that the infrastructure is typical of fast‑flux or CDN‑based abuse: the use of Cloudflare masks the true hosting environment, making takedown more difficult and allowing rapid re‑deployment of similar pages under the same domain. The combination of a zero trust score, a low‑confidence SSL certificate, and the “Start Mining $TAO” messaging strongly suggests a fraudulent scheme designed to lure victims into installing mining software or providing cryptocurrency wallet credentials.

Because the domain is presently offline, real‑time traffic monitoring is not possible, but the historical evidence warrants continued vigilance. Defenders should add distrbution-inspect.