xingyuanyuzhou[.]xyz

The domain xingyuanyuzhou.xyz is currently active and was registered on July 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IP address 172.67.204.124, which is served by Cloudflare and uses the authoritative name servers cass.ns.cloudflare.com and nicolas.ns.cloudflare.com. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one anti‑phishing platform has identified it as malicious.

VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of those vendors have raised a detection at the time of analysis. While the absence of detections does not constitute proof of safety, it suggests that the domain may be employing techniques that evade static signature detection. The limited public intelligence does not include details such as SSL certificate properties, HTTP response codes, or page titles, and no additional contextual information (e.g., targeted brand or specific phishing kit) is available.

Given the active status, recent registration, and inclusion on an anti‑phishing blocklist, security teams should consider proactively blocking the domain at the network perimeter, adding it to DNS sinkhole lists, and monitoring for any traffic originating from or directed to 172.67.204.124. Continuous re‑evaluation is recommended as additional telemetry becomes available.