012678[.]xyz

This domain, 012678.xyz, was registered on February 21, 2026, through Squarespace Domains II LLC and remains active as of July 13, 2026. Infrastructure analysis reveals Cloudflare nameservers (tony.ns.cloudflare.com, teagan.ns.cloudflare.com) and resolution to an Oracle-hosted IP (129.150.50.27, AS31898) in Singapore. The site currently returns an HTTP 525 error (SSL handshake failed), indicating either misconfigured or intentionally omitted encryption, a common tactic to avoid certificate-based scrutiny while still harvesting credentials. MX records point to mail.012678.xyz with priority 1, suggesting email capabilities that could support phishing campaigns. Security vendors have flagged the domain: 16 of 93 engines detect it as malicious, and it appears in 14 threat intelligence pulses on AlienVault OTX. Two blocklists (PhishDestroy, PhishingDB) explicitly classify it as phishing, and Google Safe Browsing labels it under SOCIAL_ENGINEERING. The page title, '012678.xyz | 525: SSL handshake failed,' provides no brand-specific clues, so the exact target or lure type remains unconfirmed. No SSL certificate is present, and the domain was not observed using additional technologies beyond Cloudflare and HTTP/3. Defenders should treat this domain as high-risk due to its active blocklist presence, lack of encryption, and consistent vendor detections. Network-level blocking of 129.150.50.27 and mail.012678.xyz is recommended, along with monitoring for related subdomains or future SSL certificate issuance. The absence of a valid certificate does not reduce risk; it may indicate an early-stage operation or deliberate evasion of TLS inspection.