xanthorox[.]ai

This domain, xanthorox.ai, was registered on 26 July 2025 through NameCheap, Inc. and is hosted on Cloudflare's network, using the authoritative name servers leif.ns.cloudflare.com and noor.ns.cloudflare.com. DNS resolution points to IP address 188.114.96.3, which belongs to a Cloudflare edge node. The domain is currently flagged as a generic phishing indicator and remains active as of 14 July 2026. No public malware analysis or page content has been released, and the site’s landing page has not been examined. VirusTotal has recorded scans by 91 vendors without any current flags, but the absence of detections does not constitute evidence of safety. The combination of a recent registration, use of a popular CDN, and association with a phishing classification suggests the infrastructure is being leveraged to host credential‑harvesting or spoofed communications. Defenders should add the domain to blocklists, monitor DNS queries for the associated IP, and inspect outbound email traffic for references to xanthorox.ai. Continuous telemetry collection and URL‑based sandboxing are recommended to capture any payloads should the site become active. Until further evidence emerges, the domain should be treated as malicious.