xenonusdt[.]com

The domain xenonusdt.com, which impersonates across, has a high threat score of 70/100 and is currently down or taken down. This domain was flagged as malicious by 2 out of 95 security vendors, including Fortinet and SOCRadar, and is listed on one public blocklist. Google Safe Browsing has not flagged this domain, indicating that it may not have been widely recognized as a threat prior to its takedown.

The domain was registered with NameCheap, Inc. in the United States on February 21, 2026, and was first detected in the database on January 24, 2026. The hosting IP address associated with this domain is 172.93.120.110. The relatively recent registration and the fact that it is currently down suggest that it may have been part of a short-lived phishing campaign targeting unsuspecting users.

The presence of a high threat score and detection by multiple vendors indicates that this domain was actively involved in malicious activities. Given its current status, it is crucial to block this domain at the perimeter and submit a report to the registrar's abuse desk to prevent any potential resurgence or re-registration under a different guise. Additionally, flagging the associated IP address as an indicator of compromise (IOC) will aid in monitoring for any related malicious activity.