xa60k[.]info

This domain, xa60k.info, is identified as a cryptocurrency presale phishing site targeting users with fraudulent investment offers. The page title, 'XA60K Official Website Presale Get Up to 200% Bonus!', is designed to deceive visitors into believing they are accessing a legitimate token presale or investment platform. Such schemes typically solicit cryptocurrency deposits under false promises of high returns, resulting in direct financial loss to victims. The domain's content and structure align with known patterns of advance-fee fraud and fake initial coin offering (ICO) scams, which exploit investor enthusiasm and lack of regulatory oversight in the cryptocurrency space. Analysis of the domain's infrastructure reveals multiple technical indicators of malicious intent. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.155.22, hosted on AS13335 (Cloudflare, Inc.), a network commonly used to obscure the true origin of phishing sites. As of the latest scan, 17 out of 95 security vendors on VirusTotal have flagged xa60k.info as malicious, indicating a moderate but consistent detection rate. Additionally, the domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), which, while legitimate, does not mitigate the underlying fraudulent activity. Users who visited xa60k.info or interacted with its content should take immediate remediation steps. Any cryptocurrency wallets or credentials entered on the site must be considered compromised; users are advised to transfer remaining funds to a new, secure wallet and revoke any connected smart contract approvals. It is also recommended to monitor financial accounts for unauthorized transactions and report the incident to relevant cybersecurity authorities or fraud reporting platforms. Given the domain's current offline status, users should remain vigilant for similar phishing attempts, particularly those impersonating cryptocurrency presales or investment opportunities.