xa11k[.]info

The domain xa11k.info has been assessed as an elevated risk for generic phishing. The primary threat is credential theft, where users are lured into providing sensitive information such as usernames, passwords, and financial details.

Analysis indicates that xa11k.info was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain resolves to the IP address 104.21.13.65, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain has been flagged by 15 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus regarding its malicious nature. The SSL certificate is issued by Google Trust Services / WE1. Additionally, the domain appears on one security blocklist and has been taken offline, indicating active measures to mitigate its impact. The page title, 'XA11K Official Pre-Sale — Get Up to 200% Bonus!', suggests a social engineering tactic to attract users with misleading offers.

To mitigate the risks associated with this generic phishing domain, organizations and individuals should avoid clicking on any links or providing personal information on pages hosted by xa11k.info. Network administrators can implement DNS-based filtering or firewall rules to block access to this domain and its associated IP address, 104.21.13.65. Security teams should also monitor for any attempts to register similar domains or subdomains and educate users about the dangers of phishing attacks, focusing on recognizing suspicious pre-sale offers and verifying the legitimacy of websites before engaging.