xa24d[.]icu

The domain xa24d.icu is associated with a generic phishing operation. It poses a significant risk to users who may visit the site, as it has been flagged by 14 of 95 security vendors on VirusTotal and appears on 1 security blocklist, PhishDestroy. The site, which was observed to have a page title of XA24D Official Pre-Sale — Get Up to 200% Bonus!, is currently taken offline. Users should avoid interacting with xa24d.icu and treat it as a potential scam.

The domain xa24d.icu was registered through NiceNIC International Group Co., Limited on December 12, 2025. It resolves to the IP address 104.21.18.231, which is located in the United States and is part of AS13335 Cloudflare, Inc. The domain does not have an SSL certificate, which can be a red flag for security-conscious users. Despite not being flagged by Google Safe Browsing, 14 of 95 VirusTotal vendors have detected it as malicious, and it appears on 1 security blocklist, further indicating its involvement in phishing activities.

Users who may have interacted with xa24d.icu should take immediate steps to protect their information. For generic phishing threats, it is recommended to change passwords for any accounts that may have been compromised, enable two-factor authentication, and monitor accounts for any signs of unauthorized activity. If the user suspects they have fallen victim to a phishing attack, they should report the incident to their email provider, the impersonated organization if applicable, and relevant authorities such as the Anti-Phishing Working Group (APWG).