xp-markets[.]com

PhishDestroy has identified the domain xp-markets.com as a high-risk active phishing threat, classified under the generic phishing category. This domain is currently active and was created on May 26, 2026, a suspiciously recent registration date that often indicates malicious intent. While the page title displays "Just a moment...", a common placeholder used by phishing sites to obscure their true purpose, the domain's behavior and technical profile strongly suggest it is part of a credential harvesting or malware distribution campaign.

The domain xp-markets.com was flagged by 1 out of 95 security vendors on VirusTotal, indicating minimal but notable detection in the security community. It appears on one security blocklist, further confirming its malicious reputation. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3, which is associated with Cloudflare infrastructure (SSL certificate from Google Trust Services / WE1). The use of Cloudflare may be an attempt to hide the true hosting location and evade takedowns. Trust scores are low due to the recent creation date and negative security signals.

As the domain remains active, users are strongly advised to avoid visiting xp-markets.com or interacting with any content from it. PhishDestroy recommends verifying any communications claiming to be from this domain through official channels. If you encounter this domain, report it to security teams and block network access to prevent exposure. Stay vigilant against generic phishing tactics that may impersonate brands or services without specific logos, as these sites often target unsuspecting visitors with fake login pages or malware downloads.