trx[.]xinhuozig[.]vip

As of July 23, 2026, the domain trx.xinhuozig.vip is flagged as a potential phishing domain. The domain resolves to the IP address 27.124.46.8 and is registered through Gname.com Pte. Ltd. It was created on June 06, 2026, which is relatively recent, indicating a possible new campaign. The domain uses nameservers a11.share-dns.com and b11.share-dns.net, which are commonly associated with shared hosting environments and may suggest a low-cost, temporary infrastructure typical of phishing operations. The domain has been flagged by one security vendor out of 91 on VirusTotal, suggesting that it may be under investigation or has been identified as suspicious.

However, a low detection rate does not necessarily imply safety, as many phishing domains are designed to evade initial detection. The domain is currently still active, and it appears on one security blocklist, specifically PhishDestroy, which further indicates its potential involvement in phishing activities. Given the high risk level and the active status of the domain, defenders should exercise caution and monitor any traffic to this domain.

Organizations should consider blocking this domain at the network level to prevent potential data breaches or credential theft. Additional manual analysis of the exact content hosted on the domain is recommended to confirm the nature of the threat and to identify any specific phishing tactics being employed. Regular updates to security blocklists and phishing detection tools are also advisable to stay ahead of evolving threats.