authdashboard-data[.]xyz

Analysis as of July 24, 2026 indicates that authdashboard-data.xyz is currently offline but retains a fingerprintable infrastructure consistent with a generic phishing operation. The domain resolves to 104.21.59.150, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. Both authoritative name servers—hope.ns.cloudflare.com and konnor.ns.cloudflare.com—are Cloudflare‑managed, confirming that the attacker is leveraging Cloudflare’s edge network for anonymity and rapid content delivery. Registration data shows the domain was created on March 06, 2026 and was registered through NiceNIC International Group Co., Limited; no further registrant contact information is disclosed.

VirusTotal reports that one of ninety‑four scanning engines flagged the domain, and the site is listed on a single security blocklist. PhishDestroy has already applied a block, and the domain appears on at least one additional blocklist. The observed HTTP response returns a page titled “Just a moment…”, a typical Cloudflare challenge page, and the site does not present an SSL certificate, indicating that HTTPS was not provisioned.

Because the site is offline, current payloads cannot be inspected, leaving the exact phishing template, targeted brand, or credential‑harvesting technique unknown. Defenders should therefore continue to deny any outbound connections to this host, enforce DNS‑level blocking of authdashboard-data.xyz, and monitor for any future re‑activation of the domain or related subdomains that resolve to the same Cloudflare IP range. Additional telemetry such as TLS fingerprinting, HTTP header analysis, and user‑agent patterns should be collected if the domain resurfaces, and incident response teams should correlate any internal logs that reference the domain with the timeline of its creation to assess potential exposure.