xfortune[.]cc
Verifica phishing e sicurezza per xfortune.cc
“Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain”
xfortune.cc — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Genericcrypto; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VT 18/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; URLScan malicious; GSB no flag; Spamhaus DBL_PHISH; BL 2 (MetaMask, SEAL); CF Radar malicious; PD 100/100. Registrar: Global Domain Group.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy first observed xfortune.cc on Feb 19, 2026. Positive findings were recorded by VirusTotal, MetaMask, SEAL, Spamhaus DBL, Cloudflare Radar, URLQuery, and URLScan. Evidence score: 100/100.
VirusTotal recorded 18 detections among 95 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, Ermes, Forcepoint ThreatSeeker on Feb 22, 2026 at 02:00 UTC. The external blocklist snapshot contained 2 matches (MetaMask, SEAL) on Aug 7, 2026 at 14:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 14, 2026 at 06:38 UTC. Cloudflare Radar classified the domain as malicious; its source timestamp was not captured. URLQuery recorded 3 threat-system alerts on Feb 19, 2026 at 16:59 UTC. URLScan returned a malicious verdict with score 100 on Feb 19, 2026 at 15:47 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. PhishStats returned no feed match on Mar 1, 2026 at 15:01 UTC.
HTTP 502 was recorded on Aug 7, 2026 at 01:29 UTC; content was unavailable. Registration records list Global Domain Group LLC as the registrar. At collection time, the domain resolved to 188.114.97.3. Collected metadata identifies Genericcrypto as the apparent target. Captured page title: “Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain”. PhishDestroy classified the observed content as Crypto Scam. DOM analysis completed on Jul 29, 2026 at 04:14 UTC; stored DOM score 0/100. IoC extraction completed on Aug 2, 2026 at 04:09 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.
Stored full analysis23/07/2026
Analysis as of July 23 2026 indicates that xfortune.cc is currently offline but exhibits multiple indicators of a high‑risk crypto phishing operation. The site was registered on 21 February 2026 through Global Domain Group LLC and resolves to 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. DNS resolution uses the Cloudflare authoritative nameservers chance.ns.cloudflare.com and olivia.ns.cloudflare.com. The SSL certificate presented is issued by Google Trust Services under the WE1 identifier, which is typical for Cloudflare‑proxied services. The page title retrieved before takedown reads “Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain,” matching the classified scam type of a crypto‑focused fraud.
Automated analysis on VirusTotal shows that 18 of 95 antivirus and URL‑reputation engines flagged the domain, confirming malicious behavior. Additional security products have blocked the domain, including PhishDestroy, MetaMask, and SEAL. The site also appears on three external blocklists, reinforcing its reputation as a phishing target. Infrastructure inspection reveals the use of third‑party tracking technologies such as Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights, which are commonly employed to gather visitor data and monetize traffic. The underlying phishing kit has been identified as the “Gambler Scam” package, a known template for cryptocurrency‑themed lures.
Gridinsoft’s trust score for the domain is 1 / 100, indicating extreme lack of credibility. While the domain is presently offline, the combination of a recent registration date, Cloudflare‑based hosting, low trust score, multiple vendor detections, and inclusion on blocklists suggests an active campaign that may have been operating for a short window.
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | xfortune.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | xfortune.cc |
malicious | Sinkholed |
| DNS4EU | xfortune.cc |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Cronologia delle segnalazioni di abuso · 9 stored reports over 62 days · click to expand
-
Report #1 ICANN CC 350h still active Mar 6, 2026 · 10:57 UTCESCALATION #2 (350h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 1256h still active Apr 13, 2026 · 07:26 UTCESCALATION #3 (1256h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 1353h still active Apr 17, 2026 · 08:13 UTCESCALATION #4 (1353h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 1487h still active Apr 22, 2026 · 22:14 UTCESCALATION #5 (1487h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 1533h still active Apr 24, 2026 · 20:09 UTCESCALATION #6 (1533h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 1578h still active Apr 26, 2026 · 17:17 UTCESCALATION #7 (1578h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 1627h still active Apr 28, 2026 · 18:33 UTCESCALATION #8 (1627h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #9 ICANN CC 1724h still active May 2, 2026 · 19:36 UTCESCALATION #9 (1724h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #10 ICANN CC 1826h still active May 7, 2026 · 01:51 UTCESCALATION #10 (1826h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
Tecnologie · 4 identified
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Informazioni su questo rapporto: xfortune.cc
Questo rapporto presenta le ultime prove archiviate disponibili per PhishDestroy. I timestamp della sorgente vengono mostrati ove disponibili; la disponibilità e i verdetti del fornitore possono cambiare dopo il ritiro.
Il sito catturato mostrava il titolo della pagina “Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain” e potrebbe spacciarsi per Genericcrypto.
Al momento di 07/08/2026, xfortune.cc ha ricevuto rilevamenti dai motori di sicurezza 18.
Se ritieni che questo elenco sia impreciso, presentare ricorso. Per conoscere la nostra metodologia, visita Pagina delle domande frequenti.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo