xcasx[.]com
xcasx.com 网络钓鱼与安全检查
“XCASX | Play at the best online casino based on Blockchain”
xcasx.com — 内容不可用 (HTTP 502). 品牌冒充:Foundation; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 7/93 (ADMINUSLabs, alphaMountain.ai, Certego, CyRadar, ESET); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 75/100. 注册商: PDR.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
On July 25 2026 analysts observed that the domain xcasx.com was taken offline after being used in a brand‑impersonation campaign targeting the "foundation" brand. The site was registered on 5 January 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and delegated to the Cloudflare name servers hayes.ns.cloudflare.com and maeve.ns.cloudflare.com. DNS resolution returned the IP address 172.67.158.64, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate was presented, indicating the site operated over plain HTTP.
The page title advertised "XCASX | Play at the best online casino based on Blockchain", matching the declared scam type of a crypto‑focused gambling fraud. The infrastructure was linked to the Gambler Scam phishing kit. VirusTotal scanned the domain and 7 of 93 security vendors reported it as malicious. AlienVault OTX listed the domain in a single threat‑intel pulse. The domain appears on one public blocklist and was blocked by the PhishDestroy service.
Evidence confirms the domain’s use for cryptocurrency‑related casino fraud and brand impersonation, but the exact content of the landing page and any credential‑collection mechanisms remain unverified because the site is offline. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and add the associated IP and name‑server pair to threat‑intel feeds. Ongoing scrutiny of Cloudflare‑hosted assets tied to similar gambling kits is recommended.
安全信号
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | xcasx.com |
malicious | Sinkholed |
| DNS4EU | xcasx.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
存档证据
证据与外部报告
PD-1767580133-xcasx.com Recipient: abuse-contact@publicdomainregistry.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。