wagygu[.]xyz

The domain wagygu.xyz has been identified as a high-risk generic phishing site. The domain does not appear to be targeting any specific brand or using a drainer kit, but it is actively being used to conduct phishing attacks. The domain's infrastructure and activities suggest it is part of a broader phishing campaign.

Infrastructure analysis reveals that wagygu.xyz is registered through Spaceship, Inc. and resolves to the IP address 185.165.169.123. The domain was created on January 17, 2026. As of the latest scan, 4 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain is not currently listed in the Google Safe Browsing (GSB) database, and it appears on 0 blocklists. This indicates that while the domain is known to some security vendors, it has not yet been widely recognized or blocked.

The domain wagygu.xyz remains active and continues to pose a high risk to users. Immediate response actions are recommended, including blocking the domain at the network level, updating security policies to warn users about potential phishing threats, and conducting further analysis to identify any additional associated infrastructure. Despite the current limited blocklist presence, the domain's active status and detection by multiple vendors suggest ongoing malicious activities, and vigilance is advised to mitigate potential risks.