xa91p[.]info

This domain, xa91p.info, carries an elevated risk level and has been identified as a generic phishing threat. It was taken offline after security researchers flagged its attempt to lure victims with promises of a 200% bonus through a fraudulent pre-sale scheme. The domain's title, "XA91P Official Pre-Sale — Get Up to 200% Bonus!," clearly indicates a phishing campaign designed to deceive users into sharing sensitive information.

Detailed analysis reveals that xa91p.info was registered through NiceNIC International Group Co., Limited and resolves to IP address 104.21.96.7. The domain was created on November 10, 2025, and its SSL certificate was issued by Google Trust Services / WE1. VirusTotal flags this domain with 15 out of 95 security vendors marking it as malicious, and it currently appears on one security blocklist. Despite its current offline status, the intelligence gathered underscores the domain's malicious intent and the need for continued vigilance.

For protection against generic phishing attacks like this, users should avoid clicking on any links or engaging with unsolicited offers promising unrealistic bonuses. Always verify the legitimacy of pre-sale or promotional campaigns by checking official sources directly. If you suspect you have interacted with a phishing domain, immediately change your passwords and enable multi-factor authentication on affected accounts. PhishDestroy recommends reporting any suspicious domains to security teams and monitoring financial accounts for unauthorized activity.