chilizfinals[.]xyz

The domain chilizfinals.xyz was registered on July 16 2026 via NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the Cloudflare‑owned address 104.21.87.13. Its authoritative nameservers are adam.ns.cloudflare.com and danica.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure. VirusTotal records show that three of ninety‑one scanning engines have flagged the domain, suggesting that at least a subset of security products consider it malicious. The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the suspicion of abuse. No additional public intelligence such as page title, SSL certificate details, or HTTP response codes has been published, so the exact content and technique employed by the site remain unknown. The short lifespan of the domain—created only four days before the report date—combined with its rapid appearance on blocklists is consistent with a fast‑flux or throwaway phishing operation. Defenders should treat chilizfinals.xyz as high‑risk: incorporate the domain into DNS and web filtering policies, add the IP address 104.21.87.13 to network‑level deny lists, and monitor Cloudflare‑associated traffic for anomalous connections. Continuous re‑scanning on VirusTotal and periodic checks of blocklist feeds are advised to capture any emerging detections. Because the site is hosted on a shared Cloudflare edge, blocking the entire IP may affect legitimate services; therefore, domain‑level blocking is preferred. Threat hunting teams should also query internal logs for recent DNS queries or HTTP requests to chilizfinals.xyz to identify possible compromise attempts.