interests-onre[.]xyz

Analysis of interests-onre.xyz indicates a generic phishing domain registered on July 17, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. As of July 25, 2026, the domain remains active and resolves to IP address 104.21.38.32, hosted on Cloudflare infrastructure with nameservers damiete.ns.cloudflare.com and tani.ns.cloudflare.com. The domain appears on one security blocklist (PhishDestroy), though no detections were recorded among the 91 vendors that scanned it on VirusTotal.

The absence of detections does not confirm safety, and the domain's content has not yet been classified beyond its generic phishing designation. Infrastructure analysis reveals the use of Cloudflare, a common tactic to obscure hosting origins and evade IP-based blocking. The domain's recent registration and lack of historical reputation further suggest malicious intent.

Defenders should treat this domain as high-risk until additional evidence emerges. Recommended actions include blocking the domain and IP at the network level, monitoring for related subdomains or IPs, and submitting samples to threat intelligence platforms for broader detection. No specific brand impersonation or phishing kit has been confirmed at this time, and the exact nature of the scam remains under investigation.