xeno-plus[.]com

xeno-plus.com is assessed at elevated risk due to confirmed generic phishing activity. The domain was specifically flagged for attempts to harvest credentials or sensitive data from users. Current classification and threat intelligence indicate a strong likelihood of use in social engineering campaigns targeting unsuspecting visitors.

Technical analysis links xeno-plus.com to a registration date of June 23, 2026, via CNOBIN INFORMATION TECHNOLOGY LIMITED. The domain utilized an SSL certificate from Google Trust Services and resolved to IP address 104.21.64.237. VirusTotal reported 10 out of 95 security vendors flagging this domain as malicious. It is currently blocked by Hagezi and BLP-Malware and appears on two recognized security blocklists. The domain is currently offline, limiting immediate active risk.

Mitigation measures should include updating endpoint and gateway blocklists to prevent any future resolution or access to xeno-plus.com. Organizations should ensure user awareness training on phishing techniques and reinforce incident response protocols for credential-related phishing. All indicators of compromise, including the specific IP address, domain, and SSL details, should be integrated into monitoring and detection systems.