xdnalabs[.]info

Analysis of xdnalabs.info, registered on July 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, shows a newly created domain that resolves to the IP address 104.21.34.155. The domain is served via Cloudflare, as indicated by its authoritative nameservers linda.ns.cloudflare.com and rommy.ns.cloudflare.com, suggesting the use of a widely available CDN and possibly shared hosting infrastructure. VirusTotal records indicate the site has been scanned by 95 security vendors, yet none have raised a detection at the time of this assessment; this lack of flags should not be interpreted as evidence of benign intent, especially given the domain's recent creation and appearance on a known security blocklist. PhishDestroy has listed xdnalabs.info as a blocked entry, confirming that at least one anti‑phishing service has identified the domain as malicious. The domain remains active, and no additional intelligence such as page title, SSL certificate details, or HTTP response codes is currently available. Defenders should treat xdnalabs.info as a high‑confidence phishing indicator, enforce URL filtering to block outbound connections, and monitor DNS logs for queries to the domain. Continuous re‑scanning with multiple vendors is advised, as detection signatures may emerge as threat actors develop payloads or as community submissions increase. Organizations employing threat‑intel feeds should incorporate the domain into their blocklists and consider outreach to the registrar for possible remediation if further malicious activity is observed.