c8cgyivc[.]co

c8cgyivc.co was registered on March 17, 2026 through Dynadot Inc and is currently pointing to the IPv4 address 23.145.232.82. The domain resolves via the authoritative name servers n1.xundns.com and n2.xundns.com. Within a few weeks of registration the domain appeared on a security blocklist and has been actively blocked by the PhishDestroy feed, indicating that it is being used for malicious activity.

VirusTotal analysis shows that three of ninety‑one scanners have flagged the domain as malicious, reinforcing the suspicion of phishing use. No public SSL certificate details, HTTP response codes, or page title information have been disclosed, so the exact content served by the site remains unverified. The limited detection footprint—one blocklist entry and three vendor detections—suggests a low‑profile deployment, but the high‑risk rating reflects the confirmed phishing classification.

Defenders should add 23.145.232.82 to network deny lists, block DNS resolution for c8cgyivc.co at the recursive resolver level, and monitor for any outbound connections to the IP address. Email security gateways should be updated to flag URLs containing the domain, and endpoint protection policies should treat the domain as malicious. Continuous re‑scanning on VirusTotal and monitoring of the Dynadot registrar for any additional domains sharing the same name servers are recommended to detect potential campaign expansion.