xscoins[.]cc

Analysis of the domain xscoins.cc indicates it operated as a cryptocurrency-themed phishing site, active as of July 23, 2026. The domain was registered on February 21, 2026, through an undisclosed registrar and resolved to the IP address 52.196.164.55, hosted on Amazon Web Services infrastructure (AS16509, Japan). The SSL certificate, issued by Amazon RSA 2048 M02, suggests the use of standard cloud security measures, though this does not mitigate the domain's malicious intent. Security vendor detections on VirusTotal flagged xscoins.cc as malicious, with 7 out of 93 engines identifying it as a threat.

The domain appears on at least one security blocklist, and AlienVault OTX includes it in two threat intelligence pulses, further corroborating its association with phishing activity. Scamadviser assigned the domain a trust score of 26 out of 100, reflecting elevated risk. The page title 'hisgo' provides limited insight into the specific targeting or brand impersonation, as no additional context about the phishing kit or intended victim profile is available. Infrastructure analysis reveals the domain was taken offline prior to this report, though its prior hosting on a major cloud provider aligns with common phishing tactics leveraging legitimate services to evade initial detection.

Defenders should treat xscoins.cc as a confirmed phishing domain, particularly for campaigns targeting cryptocurrency users. Network-level blocks are recommended for the IP 52.196.164.55 and the domain itself, alongside monitoring for related infrastructure reuse. Given the domain's offline status, further forensic analysis may be limited, but historical associations with threat intelligence pulses warrant continued vigilance.