m96u[.]xyz

The domain m96u.xyz has been confirmed as a phishing site, exhibiting a substantial VirusTotal detection score of 15 out of 95. Due to its suspicious nature, it posed risks to users by potentially impersonating legitimate services or collecting sensitive information. The domain has been flagged in various threat intelligence platforms, indicating its malicious intent.

Registered with Gname.com Pte. Ltd., this domain was relatively young, having been active for only 212 days. The IP address associated with it is 110.42.43.240, which may have been used in conjunction with other malicious activities. With its recent registration, it fits the pattern commonly seen in phishing schemes that rely on short-lived domains for their operations.

As of now, m96u.xyz has been taken down and is no longer active. PhishDestroy has reported the domain, ensured it is blocklisted, and continues to monitor the situation to prevent any resurgence. The actions taken help safeguard users from potential phishing attempts originating from this domain.