xelinota[.]info

The domain xelinota.info is flagged as a phishing site targeting individuals interested in Swiss vignettes. Despite being taken down, it was detected by PhishDestroy on the same day it was created, February 22, 2026. This rapid detection highlights the effectiveness of PhishDestroy's proactive monitoring systems. Two out of 95 vendors on VirusTotal have identified it as malicious, and it appears on one public blocklist.

The site, hosted on an IP managed by Cloudflare in the US, used an SSL certificate issued by Google Trust Services. Its page title, 'Xelinota - Schweizer Vignetten Wissensplattform,' suggests it was designed to deceive users into thinking it was a legitimate information platform for Swiss vignettes. The domain's registration through PDR Ltd. d/b/a PublicDomainRegistry.com further indicates a level of planning typical in phishing operations.

While the site is currently offline, the fact that it was flagged by only two VirusTotal vendors underscores the importance of early detection. Phishing domains often exploit the window between registration and widespread detection by antivirus vendors. PhishDestroy's pipeline captures these threats during this critical period, providing an essential layer of protection. The inclusion of xelinota.info in public blocklists serves as a warning to potential victims and a reminder of the ongoing threat posed by such scams.