xelocas[.]com

Analysis of xelocas.com indicates that the domain was created on February 21, 2026 and is presently taken offline. The authoritative name servers are chloe.ns.cloudflare.com and reese.ns.cloudflare.com, confirming that the domain is serviced through Cloudflare’s infrastructure. DNS resolution points to IP address 104.21.56.208, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The HTTPS endpoint presents a certificate issued by Google Trust Services under the WE1 designation, a standard Cloudflare‑proxied certificate. An HTTP request to the site returns a 403 status code, and the page title returned by the server reads "Suspected phishing site | Cloudflare," indicating that the content is being flagged by Cloudflare’s internal protection mechanisms.

Threat intelligence from VirusTotal shows that three of ninety‑one scanning engines have flagged the domain, suggesting a modest but non‑trivial detection footprint. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence of malicious intent.

The registrar listed for xelocas.com is NameSilo, LLC, a commonly used registration service that does not itself imply benign or malicious use. No additional contextual information, such as the targeted brand or specific phishing kit, is available from the supplied data; the page title provides only a generic indication of phishing. Consequently, while the technical indicators confirm malicious activity, the precise payload or victim profile remains unknown.

Defenders should continue to block traffic to 104.21.56.208 and add xelocas.com to internal deny lists, especially for any outbound connections from corporate environments.