xabeto[.]com

The domain xabeto.com has been identified as a brand impersonation threat, specifically targeting the Ethereum brand. The domain is currently offline, which may indicate that it has been taken down or is no longer actively being used for malicious purposes.

Analysis indicates that the domain xabeto.com has been flagged by 3 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain was registered through MAT BAO CORPORATION on July 19, 2025, and resolves to the IP address 57.129.97.29. This domain appears on 2 security blocklists, namely PhishDestroy and OISD, further confirming its malicious intent. The page title, 'XABETO | Enter the world of sport and stakes!', is designed to mislead users into believing they are accessing a legitimate Ethereum-related site.

The current status of xabeto.com being offline reduces the immediate risk to users. However, the domain should remain blocked to prevent any resurgence of phishing activities. Security teams are advised to monitor the domain for any signs of reactivation and to continue blocking it at the network level. Additionally, users should be educated to verify the authenticity of websites, especially those related to financial and cryptocurrency services, by checking the domain name and SSL certificate.