xfortune[.]cc
xfortune.cc のフィッシング・安全性チェック
“Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain”
xfortune.cc — コンテンツが利用できません (HTTP 502). ブランドの偽装: Genericcrypto; 詐欺タイプ: Crypto Scam. 証拠の概要: VirusTotal 18/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 100/100. レジストラ: Global Domain Group.
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
Analysis as of July 23 2026 indicates that xfortune.cc is currently offline but exhibits multiple indicators of a high‑risk crypto phishing operation. The site was registered on 21 February 2026 through Global Domain Group LLC and resolves to 188.114.97.3, an address owned by Cloudflare (AS13335) located in the United States. DNS resolution uses the Cloudflare authoritative nameservers chance.ns.cloudflare.com and olivia.ns.cloudflare.com. The SSL certificate presented is issued by Google Trust Services under the WE1 identifier, which is typical for Cloudflare‑proxied services. The page title retrieved before takedown reads “Xfortune: Elon Musk’s Official Crypto Casino Powered by Blockchain,” matching the classified scam type of a crypto‑focused fraud.
Automated analysis on VirusTotal shows that 18 of 95 antivirus and URL‑reputation engines flagged the domain, confirming malicious behavior. Additional security products have blocked the domain, including PhishDestroy, MetaMask, and SEAL. The site also appears on three external blocklists, reinforcing its reputation as a phishing target. Infrastructure inspection reveals the use of third‑party tracking technologies such as Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights, which are commonly employed to gather visitor data and monetize traffic. The underlying phishing kit has been identified as the “Gambler Scam” package, a known template for cryptocurrency‑themed lures.
Gridinsoft’s trust score for the domain is 1 / 100, indicating extreme lack of credibility. While the domain is presently offline, the combination of a recent registration date, Cloudflare‑based hosting, low trust score, multiple vendor detections, and inclusion on blocklists suggests an active campaign that may have been operating for a short window.
セキュリティシグナル
ネットワークセキュリティインテリジェンス
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | xfortune.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | xfortune.cc |
malicious | Sinkholed |
| DNS4EU | xfortune.cc |
malicious | Sinkholed |
脅威対応 Pipeline
公開ブロックリスト登録状況
不正利用報告履歴 · 9 stored reports over 62 days · click to expand
-
Report #1 ICANN CC 350h still active Mar 6, 2026 · 10:57 UTCESCALATION #2 (350h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 1256h still active Apr 13, 2026 · 07:26 UTCESCALATION #3 (1256h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 1353h still active Apr 17, 2026 · 08:13 UTCESCALATION #4 (1353h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 1487h still active Apr 22, 2026 · 22:14 UTCESCALATION #5 (1487h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 1533h still active Apr 24, 2026 · 20:09 UTCESCALATION #6 (1533h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #7 ICANN CC 1578h still active Apr 26, 2026 · 17:17 UTCESCALATION #7 (1578h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #8 ICANN CC 1627h still active Apr 28, 2026 · 18:33 UTCESCALATION #8 (1627h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #9 ICANN CC 1724h still active May 2, 2026 · 19:36 UTCESCALATION #9 (1724h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
-
Report #10 ICANN CC 1826h still active May 7, 2026 · 01:51 UTCESCALATION #10 (1826h active): Phishing - xfortune[.]ccabuse@globaldomaingroup.com abuse@verisign-grs.com compliance@icann.org
使用技術 · 4 identified
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by Meta — logs page views and custom events to Facebook/Instagram ad accounts.
www.facebook.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comVirusTotalによる分析
アーカイブ済み証拠
証拠および外部報告書
PD-20260219-5B56CE Recipient: abuse@globaldomaingroup.com このサイトによって何か影響を受けましたか?
アカウント資格情報、個人情報、支払い情報を入力した場合、またはこのドメインからファイルをダウンロードした場合は、すぐに対処してください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
お住まいの地域の当局へ報告してください
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
任意のドメインを確認する
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャンフィッシングを報告する
不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポートリアルタイム脅威情報フィード
最近のフィッシングレポートと観察された可用性の変化
監視最新情報を入手し、安全を確保しましょう
リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください