xpilay[.]com

The domain xpilay.com is assessed as having an elevated risk level and is categorized as a generic phishing threat. This domain is designed to impersonate a known brand, potentially leading to the compromise of user credentials and sensitive information.

Infrastructure analysis reveals that xpilay.com resolves to the IP address 104.21.64.72. The domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. According to VirusTotal, 3 out of 95 security vendors have flagged this domain as malicious, indicating a low but significant level of detection. The domain has also appeared in 1 threat intelligence pulse on AlienVault OTX and is currently listed on 1 security blocklist. The current status of the domain is offline, suggesting that it may have been taken down by authorities or the hosting provider. PhishDestroy has blocked this domain, further confirming its malicious nature.

To mitigate the risk posed by this domain, users and organizations should ensure that their security systems are updated with the latest threat intelligence, including the IP address 104.21.64.72 and the domain xpilay.com. Network administrators should consider implementing DNS-based blocking or firewall rules to prevent access to this domain. Additionally, users should be educated on recognizing phishing attempts, such as verifying the authenticity of URLs and avoiding suspicious links. Regularly updating software and using multi-factor authentication can also enhance security measures against such threats.