The domain xcorgi.info was registered on July 28 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently pointing to the IP address 188.114.97.3. Both authoritative name servers are Cloudflare nodes (mona.ns.cloudflare.com and oswald.ns.cloudflare.com), indicating the domain is using Cloudflare’s DNS and likely its CDN or proxy services. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, which classifies it as a generic phishing source.
VirusTotal has recorded 91 vendor scans with no current detections, but the absence of alerts does not constitute a safety guarantee. No public SSL certificate details, HTTP response codes, page titles, or content snapshots are available from the provided intelligence, so the actual landing page and any credential‑harvesting forms remain unverified. The short lifespan of the domain combined with immediate blocklist inclusion suggests an opportunistic phishing campaign that was launched shortly after registration.
Defenders should add 188.114.97.3 to network‑level deny lists, enforce DNS filtering for xcorgi.info, and monitor Cloudflare‑associated traffic for anomalous request patterns. Continuous re‑scanning on multi‑engine services is advised, as well as periodic checks of blocklist feeds for any new detections. Until further content analysis is performed, the domain should be treated as high‑risk for credential theft.