xando-dapp[.]com

This domain, xando-dapp.com, is actively engaged in brand impersonation phishing targeting Belqora Security Inc., a purported AI cybersecurity platform. Analysis indicates the site presents itself as the legitimate security firm to deceive visitors into disclosing sensitive information or downloading malicious payloads. The threat type is classified as a high-risk brand impersonation scheme, currently operational and accessible. Infrastructure analysis reveals the domain was registered on July 3, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.97.3 and is secured with an SSL certificate issued by Google Trust Services. Despite its recent creation, only 1 of 95 VirusTotal security vendors has flagged the domain as malicious, suggesting either limited detection or evasion techniques. The page title, 'Belqora Security Inc. | AI Cybersecurity Platform,' directly mimics the branding of the legitimate entity, reinforcing the impersonation strategy. The domain remains active and poses a significant risk to users unfamiliar with Belqora Security Inc.'s authentic digital presence. Organizations and individuals are advised to block access to xando-dapp.com at the network level and update endpoint protection rules to include this domain. Security teams should monitor for related indicators of compromise, including the IP address 188.114.97.3 and any associated SSL certificates. Users encountering this domain should avoid interaction and report it to their security operations center for further investigation.