ag-event[.]xyz

Analysis indicates that the domain ag-event.xyz is currently active and has been identified as a phishing infrastructure. The site returns an HTTP 301 redirect, a behavior commonly used to forward victims to a malicious payload or credential‑harvesting page. It is listed on one public security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that security vendors have observed malicious use. VirusTotal scans show that 2 of 91 antivirus engines flagged the domain, providing additional corroboration of its malicious nature. No public information about the targeted brand or the exact content of the site is available, so the specific impersonated service cannot be confirmed at this time. Defenders should add ag-event.xyz to URL filtering and DNS block lists, monitor network traffic for connections to the domain, and employ email security controls to detect and quarantine messages that reference the URL. Continuous re‑evaluation is advised in case additional intelligence, such as page content or associated command‑and‑control infrastructure, becomes available.