robin-main-net[.]xyz

The domain robin-main-net.xyz was registered on 19 July 2026 through the registrar Ultahost, Inc. and is currently resolved to the Cloudflare‑hosted address 104.21.49.106, using the authoritative nameservers aryanna.ns.cloudflare.com and camilo.ns.cloudflare.com. VirusTotal has recorded that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the scans returned a detection at the time of analysis. While the lack of detections does not guarantee that the site is benign, it indicates that known signatures have not yet flagged the host.

The domain appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one anti‑phishing platform has identified it as malicious. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, trust‑score, or page‑title information is presently available for this host, limiting the depth of technical fingerprinting. The short operational window—creation only ten days prior to the report date—combined with its immediate appearance on a blocklist suggests an actively deployed phishing infrastructure.

Defenders should add robin-main-net.xyz to outbound‑web filtering rules, enforce DNS‑level blocking, and consider sinkholing the associated IP range if feasible. Continuous monitoring of the IP 104.21.49.106 for new reputation changes, as well as periodic rescans on VirusTotal and other sandbox services, is advised. Organizations should also audit authentication flows that could be targeted by generic phishing attempts and educate end‑users about unsolicited credential requests that may reference this domain.