s93y[.]xyz

Analysis of the domain s93y.xyz, registered on February 21, 2026, indicates it was actively flagged as a generic phishing threat prior to being taken offline. The domain appears on one security blocklist, specifically PhishDestroy, and was recorded in a single AlienVault OTX threat intelligence pulse, suggesting coordinated detection efforts. VirusTotal data from 13 of 93 security vendors classified this domain as malicious, reinforcing its elevated risk classification. The page title, matching the domain name itself (s93y.xyz), provides no additional context about the intended target or scam type, and no brand impersonation is confirmed from available evidence.

Infrastructure assessment reveals a Scamadviser trust score of 1 out of 100 and a Gridinsoft trust score of 0 out of 100, both indicating high suspicion. The domain's creation date aligns with typical phishing lifecycle patterns, though no hosting provider, IP address, or SSL certificate details are currently available for further attribution. As of July 23, 2026, the domain is offline, though historical records confirm its prior malicious activity. Defenders should treat any residual references to s93y.xyz as high-risk, particularly in logs, proxy data, or email filtering systems.

Organizations using PhishDestroy or AlienVault OTX are advised to verify if existing rules already block this domain. Given the lack of confirmed brand targeting or scam specifics, generic phishing detection rules should suffice for mitigation. No evidence suggests this domain was part of a larger phishing kit or campaign, but monitoring for related domains with similar naming patterns (e.g., sXXy.xyz) may help preempt future threats.