xslots[.]cc

PhishDestroy identifies xslots.cc as an active credential phishing domain impersonating a gaming platform to harvest user login details. The domain leverages a homograph attack, mimicking the legitimate 'xslots.com' brand to deceive victims into entering sensitive credentials. No known drainer kit or sophisticated obfuscation was detected during analysis, suggesting reliance on social engineering for initial compromise.

Technical indicators confirm xslots.cc resolves to IP 172.67.210.140 and is registered via Global Domain Group LLC. VirusTotal currently shows 8/95 detections despite the domain's active status, while Google Safe Browsing (GSB) has not yet flagged it. The domain was created on March 12, 2026, indicating a recent threat with minimal historical data. No blocklists currently include this domain, leaving users and organizations vulnerable to exploitation.

As of this advisory, xslots.cc remains active with a 'high' risk rating. Immediate actions include blocking the domain at the network perimeter and updating endpoint detection rules. Users are advised to verify URLs before entering credentials and report suspicious activity. Remaining risk is elevated due to the domain's use of a trusted SSL certificate (Let's Encrypt) and low detection rates, necessitating continued monitoring and proactive threat hunting.