h88d[.]xyz

The domain h88d.xyz was registered on January 10, 2026 through Gname.com Pte. Ltd. and is currently taken offline. DNS resolution points to the IP address 45.196.247.160, which is associated with Nebula Global LLC in Hong Kong. The hosting infrastructure has a Gridinsoft trust score of 0 out of 100, indicating a lack of reputational confidence. The site was flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that it has been identified as malicious by at least two independent sources.

VirusTotal analysis shows that 15 of 93 security vendors marked the domain as malicious, providing further corroboration of its threat nature. AlienVault OTX lists the domain in a single intelligence pulse, suggesting that it has been observed in the broader threat‑intel community. The page title returned by the web server is simply "h88d.xyz," offering no additional context about the intended victim brand or lure. Because the site is offline, real‑time HTTP response details, SSL certificate information, and Safe Browsing verdicts are unavailable.

The limited public evidence points to a short‑lived generic phishing operation that leveraged a newly registered domain, low‑reputation hosting, and rapid takedown. Defenders should continue to block the domain at perimeter filters, monitor the associated IP address for any re‑use, and update internal threat‑intel feeds with the observed indicators. Organizations that rely on automated URL reputation services should ensure that h88d.xyz is included in their deny lists, and SOC analysts should treat any future sightings of the domain or its IP as high‑confidence malicious activity pending further investigation.