xmochidonuts-allocation[.]com

The domain xmochidonuts-allocation.com was registered on June 07, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Its authoritative nameservers are micah.ns.cloudflare.com and ullis.ns.cloudflare.com, indicating that the domain is hosted on Cloudflare’s DNS network. DNS resolution points to the IPv4 address 188.114.96.3. The IP belongs to a hosting provider that frequently appears in abuse reports, but no additional attribution such as ASN or country is supplied in the available data. Multiple security‑vendor feeds have flagged the domain.

PhishDestroy and ScamSniffer have already added it to their blocklists, and the domain appears on two other public blocklists. VirusTotal reports that six of ninety‑one scanners returned a positive detection for malicious activity, reinforcing the suspicion that the site is being used for abusive purposes. No Safe Browsing or Google Transparency reports are referenced in the current intelligence set. The short age of the domain—less than two months at the time of this report—combined with the presence of a Cloudflare front‑end suggests a rapid‑deployment model commonly used for credential‑harvesting campaigns. However, no page‑title, SSL certificate details, HTTP response codes, or explicit brand‑target information have been disclosed, leaving the exact phishing lure undefined.

Defenders should block or sinkhole traffic to 188.114.96.3 and add xmochidonuts-allocation.com to local deny lists. Continuous monitoring of the domain’s DNS records is advised, as the attacker may switch hosting or update the nameservers. Organizations using email or web filters should incorporate the known blocklist identifiers (PhishDestroy, ScamSniffer) to ensure early detection. Because the domain’s content has not been publicly analysed, any user‑initiated request should be treated as high risk until the site is taken down or further forensic evidence becomes available.