txsamm-coin[.]xyz
“amm”
txsamm-coin.xyz — 内容不可用 (HTTP 502). 证据摘要: VirusTotal 9/93 (alphaMountain.ai, BitDefender, Forcepoint ThreatSeeker, Fortinet, G-Data); PhishDestroy score 77/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain txsamm-coin.xyz was registered on February 21, 2026 and is currently marked as offline. DNS resolution points to the IP address 172.67.160.83, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a page title of "amm" but no further content analysis is available, leaving the exact nature of the hosted content unverified. Security telemetry shows that Gridinsoft assigned a trust score of 0 out of 100, indicating a complete lack of confidence in the domain’s safety.
VirusTotal scans returned nine positive detections out of ninety‑three participating vendors, confirming that multiple security engines have identified malicious characteristics. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. The SSL certificate presented is labeled WE1, but no additional certificate details such as issuer or validity period are provided.
Given the combination of a low trust score, multiple vendor detections, blocklist inclusion, and the offline status, defenders should treat txsamm-coin.xyz as a confirmed phishing indicator. Recommended actions include adding the domain to deny‑list rules across perimeter firewalls, DNS filtering, and endpoint protection solutions, as well as monitoring for any future re‑activation or related infrastructure changes. Continuous observation of the associated Cloudflare IP range for anomalous traffic patterns is advisable, and any internal alerts that reference the domain or its IP should be investigated promptly.
威胁响应 Pipeline
公共封禁名单状态
取证情报
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。