u95f[.]xyz

The domain u95f.xyz has been identified as a threat characterized by brand impersonation, specifically targeting Gmail. As of the latest assessment, the domain is currently offline. Analysis indicates the malicious intent of this domain to deceive users by posing as a legitimate brand, as reflected in its current status and operation history.

The domain was created on March 11, 2026, and has been flagged by 20 out of 95 security vendors on VirusTotal for illicit activities. It resolves to the IP address 45.196.247.26, which is registered under AS140224 with Nebula Global LLC, located in Hong Kong. The registrar used for this domain is Gname.com Pte. Ltd. Furthermore, the domain has been listed on at least one security blocklist and has been actively blocked by the security entity PhishDestroy, highlighting its recognized threat status within the cybersecurity community.

Currently, u95f.xyz is offline, which reduces its immediate threat level but does not eliminate the potential risk it poses if reactivated. It is advisable for users to exercise caution, remain vigilant for similar phishing attempts, and ensure updated security measures are in place. Organizations should ensure their network defenses are robust against such impersonation tactics, and individuals should be aware of common signs of phishing to mitigate exposure to such threats.