byxatab.com
Torrent site offering unauthorized game repacks and Steam balance top-ups.
At a glance
3 facts that matterThe Dossier
byxatab.com presents itself as a torrent hub for PC games, listing recent titles with download links and a prominent support button that solicits donations. The page also advertises Steam balance replenishment for users in restricted regions. Security vendors record zero detections, the domain is 4.5 years old, and the hosting IP shows no abuse reports, yet the site is a documented clone of xatab-repack.com, whose original operator is deceased. Multiple third-party sites now use the name to distribute cracked software, a common vector for malware and poisoned installers.
- 1Distributes pirated game repacks and torrents, a common malware vector
- 2Clone of xatab-repack.com after the original operator's death
- 3Offers Steam balance replenishment for restricted regions, a known scam vector
- 4No contact email or postal address listed
- 1Domain registered 4.5 years ago
- 2Valid SSL certificate
- 3Hosting IP shows zero abuse reports
Site Purpose and Visitor Journey
The homepage greets visitors with the title "Скачать торрент игры от xatab на ПК" and a description claiming to be the official Xatab site. A navigation bar offers categories such as New Games 2024-2025, Top 100, Russian Voiceovers, and a login/registration system. The main content displays a grid of game entries with release dates, file types ("Папка игры" or "Архив"), and direct torrent or archive download options. A visible "Support" button encourages financial contributions, while a dedicated section promotes automatic Steam balance replenishment for RU-KZ-UA-CIS regions.
Operator Identity and Claims
The page lists seven phone numbers spanning 2015-2025 and one social link but provides no email address or postal address. The domain registration record shows 4.5 years of history with ownership privacy disabled. The site claims affiliation with the original Xatab repacker, yet evidence identifies it as a clone of xatab-repack.com.
Security and Abuse Signals
Security vendors report zero malicious or suspicious detections out of 92 engines. The connection uses a valid certificate, the hosting IP carries a zero abuse score, and no browser warnings are recorded. Despite these clean technical signals, the site's function—aggregating copyrighted material for unauthorized download—places it in the piracy and malware-distribution categories.
Observed Risk Patterns
The combination of torrent distribution, donation requests, and Steam-balance services creates multiple exposure points: users risk downloading malware-laden installers, and the Steam top-up feature is a known financial-scam vector targeting restricted regions. No login form is required to browse listings, lowering the barrier to engagement.
Avoid visiting or downloading from this site.
Website Preview
This website operates as a hub for pirated software distribution and unauthorized game torrents, presenting a high risk for malware delivery and financial fraud through third-party payment services.
- 1Site facilitates the distribution of pirated software and unauthorized game torrents
- 2Prominent 'Support' button encourages financial contributions to an illicit distribution platform
- 3Includes a section for 'Steam Replenishment' which is a common vector for financial scams targeting users in restricted regions
- 4Aggregates copyrighted intellectual property for unauthorized download
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 18, 2026 at 8:01 PM UTCIdentity
6 facts- Operator
- Claimed Only
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- 7 numbers
- Postal address
- Not observed
- Social profiles
- 1 link
Domain
8 facts- Domain age
- 5 years old
- Registered
- Jan 2, 2022
- Registrar
- Beget LLC
- Expires
- Jan 2, 2027
- WHOIS updated
- Jan 2, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.2
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- byxatab.com
- Certificate valid from
- Jun 25, 2026
- Certificate valid to
- Sep 23, 2026
- Network address
- 104.26.1.227
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
12 facts- Scan scope
- Domain
- Destination host
- byxatab.com
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Page requests
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 5
Identity6 facts›
- Operator
- Claimed Only
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- 7 numbers
- Postal address
- Not observed
- Social profiles
- 1 link
Domain8 facts›
- Domain age
- 5 years old
- Registered
- Jan 2, 2022
- Registrar
- Beget LLC
- Expires
- Jan 2, 2027
- WHOIS updated
- Jan 2, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure14 facts›
- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.2
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- byxatab.com
- Certificate valid from
- Jun 25, 2026
- Certificate valid to
- Sep 23, 2026
- Network address
- 104.26.1.227
- ASN
- Unavailable
- Hosting organization
- Cloudflare, Inc.
- Country
- US
- Server
- cloudflare
- Site platform
- Unavailable
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections12 facts›
- Scan scope
- Domain
- Destination host
- byxatab.com
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Page requests
- Unavailable
- Unique IPs contacted
- Unavailable
- Countries contacted
- Unavailable
- Referenced domains
- 5
What to do
Avoid visiting or downloading from this site.
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
Final Verdict
Why this verdict
Malicious. This site distributes pirated game torrents and operates as a clone of a known repack platform.
Avoid visiting or downloading from this site.
Key evidence
- 1Distributes pirated game repacks and torrents, a common malware vector
- 2Clone of xatab-repack.com after the original operator's death
- 3Offers Steam balance replenishment for restricted regions, a known scam vector
Safety FAQ
Is byxatab.com safe to use?+
Malicious. This site distributes pirated game torrents and operates as a clone of a known repack platform.
What should I do about byxatab.com?+
Avoid visiting or downloading from this site.
How old is byxatab.com?+
byxatab.com is 5 years old and was registered jan 3, 2022.
What if I already interacted with byxatab.com?+
If you downloaded or opened a file, disconnect the device if it behaves unexpectedly, run a full security scan, remove anything installed from the page, and change important passwords from a different trusted device.
When was this report updated?+
This report reflects the scan completed July 18, 2026 at 8:01 PM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.