xstocks0.xyz
Catégorie : Phishing
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de xstocks0.xyz
xstocks0.xyz appears to present itself as a cryptocurrency-related web application focused on token or asset transfer between blockchain networks. The screenshot shows a minimal interface labeled "xStocks0" with options to move assets from Ethereum to Base and a prominent "Connect Wallet" / "Connect Wallet to Transfer" prompt, suggesting a wallet-connected transfer or bridge-style service.
Based on the domain name, visual layout, and on-page wording, the site may be targeting users interested in crypto asset movement rather than providing broader financial or informational services. No clear operator identity, company details, or regulatory disclosures are visible in the provided screenshot, so the entity behind the site is not readily verifiable from the available data.
The branding also appears somewhat generic and lightweight for a financial-style service, with limited visible navigation, documentation, or trust signals beyond a brief reference to cross-chain transfer functionality. That does not by itself prove abuse, but it does leave less context for users trying to confirm legitimacy.
Évaluation de sécurité de xstocks0.xyz
Multiple security sources categorized this domain as phishing or fraud-related, and 7 out of 94 security engines flagged it at the time of this scan. While one malware scan reported no malicious files and no flagged external resources, phishing pages often rely on deceptive wallet prompts or credential harvesting rather than downloadable malware, so a clean file scan does not remove the underlying concern.
Several contextual risk factors increase caution here. The domain is very new at 57 days old, has no measurable popularity ranking, and uses a sparse crypto interface centered on connecting a wallet. In the screenshot, the page asks visitors to connect a wallet before any meaningful transparency about the service, operator, fees, or safeguards is provided. That pattern can be associated with wallet-draining or fraudulent crypto schemes, especially when combined with phishing-related classifications from multiple web-classification providers.
The absence of blacklist hits in some databases and the presence of valid HTTPS are not strong indicators of legitimacy on their own, since newly created phishing sites commonly use standard TLS certificates and mainstream infrastructure. Based on these findings, this website may pose potential risks to visitors.
Description technique
The domain uses a valid Let's Encrypt SSL certificate and is fronted by Cloudflare infrastructure, with traffic resolving to a Cloudflare IP in Toronto, Canada. Nameservers also point to Cloudflare, which may provide CDN and reverse-proxy services. DNSSEC appears to be unsigned, which is common but offers less DNS integrity assurance than a signed configuration.
From a security posture standpoint, the main concerns are not the TLS setup but the domain's recent registration date, lack of established reputation, and the mismatch between a clean malware-file scan and multiple phishing-related detections from security engines. The site appears technically simple, with no obvious iframe abuse reported in the scan, but the wallet-connection workflow shown in the screenshot may still present account or asset-theft risk if the underlying application is deceptive.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?