Confirmed abuse on *****[.]xyz
Crypto-scam and impersonation activity on *****[.]xyz
Blackwall verified a dedicated crypto-scam and impersonation operation hosted on *****[.]xyz. The site was designed to facilitate malicious activity, and Blackwall initiated neutralization efforts through multiple channels. The site has since been observed offline.
Timeline
This case was reported on September 19, 2026, and confirmed as malware found by Blackwall. Blackwall's monitoring began immediately upon report. Actions were initiated 14 hours after the report. The site was verified offline by our team, with the last update on September 19, 2026.
Indicators
- domain: *****[.]xyz
- uses Cloudflare
What to do
Users should exercise caution when encountering unexpected cryptocurrency investment offers. Always verify the legitimacy of investment platforms through independent research before engaging.
A member of the Fraudpol community reported *****[.]xyz for confirmed abuse. Screenshots, evidence files, and reporter contact details are kept private and shared only with hosters, registrars, and law enforcement when action is required.
Reported behaviors
How this listing works
Listings are published only after verification by our team and are removed if a review shows the site is legitimate. Fraudpol never publishes full URLs, screenshots, evidence files, or the reporter's identity.