checker-xdc[.]com

This domain, checker-xdc.com, was registered on July 16 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IP address 188.114.97.3. The authoritative name servers are adam.ns.cloudflare.com and danica.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy sink‑hole, which suggests that it is being used for phishing campaigns. VirusTotal has processed the host with 91 anti‑malware engines; none of the engines flagged the domain, but the absence of detections does not constitute evidence of benign behavior. The domain’s risk status is listed as “under investigation” and its operational status is marked “active,” implying that malicious infrastructure may still be in use. Available intelligence does not include Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, or page title information, so the visual or functional characteristics of the landing page remain unverified. Consequently, the precise phishing lure, target brand, or credential‑harvesting technique cannot be confirmed at this time. Defenders should continue to monitor DNS queries for the domain and its associated IP, enforce blocklist rules that already list checker‑xdc.com, and consider adding the domain to internal deny lists. Network traffic to the Cloudflare name servers should be logged, and any authentication attempts directed at the domain should be investigated for credential theft. Ongoing collection of payload samples and page content is recommended to enrich the profile and to enable correlation with emerging phishing kits.