apichan[.]xyz

Analysis as of July 20 2026 indicates that the domain apichan.xyz was registered three days prior to the report, on July 17 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, and DNS resolution points to the IPv4 address 75.2.60.5. The hosting IP does not appear in any public reputation databases beyond a single blocklist entry, and the domain is currently listed by the PhishDestroy blocklist, confirming that at least one third‑party service has identified it as malicious. VirusTotal reports that the domain was scanned by 95 antivirus and URL‑reputation engines, none of which raised a detection. The absence of a detection does not constitute evidence of benign behavior; it merely reflects that the available engines have not yet flagged the payload or infrastructure. No SSL certificate details, HTTP response codes, or page‑title information are available in the supplied intelligence, limiting visibility into the surface‑web characteristics of the site. Likewise, Safe Browsing, OTX, and additional trust‑score services have not been referenced, leaving those vectors unassessed. The lack of publicly disclosed content means that the specific phishing lure or credential‑harvesting technique employed by the site cannot be confirmed at this time. Given the recent creation date, the association with a known blocklist, and the presence of dedicated name‑server infrastructure, defenders should treat apichan.xyz as a high‑confidence indicator of malicious activity. Recommended actions include adding the domain and its resolving IP to outbound web‑proxy deny lists, configuring DNS‑level blocks for the authoritative name servers, and monitoring network traffic for any connections to 75.2.60.5.