xa48z[.]icu

PhishDestroy identifies xa48z.icu as an active elevated-risk phishing domain designed to impersonate legitimate login portals, likely targeting unsuspecting users to harvest sensitive credentials. This domain resolves to IP 188.114.96.3 and exhibits behavior consistent with credential theft campaigns, posing a direct threat to user security and privacy.

This domain was flagged by 6 out of 95 VirusTotal security vendors, indicating a significant detection rate for malicious activity. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 188.114.96.3, a known hosting provider associated with malicious infrastructure. The combination of low detection coverage and active hosting suggests this domain remains a viable threat vector for phishing attacks. Users who have encountered xa48z.icu should treat it as a confirmed malicious domain and avoid any interaction, including clicking links or submitting information.

If you visited xa48z.icu, immediately cease any interaction with the site and do not input any credentials or personal information. Scan your device for malware using reputable antivirus software and consider changing passwords for accounts that may have been exposed. Report the domain to your security team or through platforms like VirusTotal to help mitigate further spread. Stay vigilant for phishing attempts and verify website legitimacy before entering sensitive data.