1xlite-14788[.]pro

This domain, 1xlite-14788.pro, is under investigation for credential harvesting phishing activity targeting unspecified brands or services. Analysis indicates the infrastructure is actively deployed, though no specific impersonated entity has been confirmed at this stage. The domain remains unflagged by most security vendors but exhibits characteristics consistent with phishing operations. Infrastructure analysis reveals the domain was registered on April 24, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 188.114.96.3 and has been flagged by 0 of 95 VirusTotal vendors, indicating limited detection at present. The Gridinsoft trust score for this domain is 0/100, reflecting high suspicion. It appears in one threat intelligence pulse on AlienVault OTX and is currently blocked by one security blocklist, suggesting emerging recognition within the threat intelligence community. Current risk assessment places this domain in the under_investigation category due to its active status and technical indicators. Organizations are advised to monitor network traffic for connections to 188.114.96.3 and 1xlite-14788.pro, implement DNS-based blocking if feasible, and conduct retrospective analysis of logs for prior interactions. End users should be cautioned against entering credentials on this domain, and security teams are encouraged to submit samples to threat intelligence platforms to improve detection coverage.