14152[.]xyz

On 29 July 2026 the domain 14152.xyz was assessed as an active generic phishing site with an elevated risk rating. The domain is listed on a single security blocklist and is currently blocked by the PhishDestroy service, indicating that at least one anti‑phishing platform has identified it as malicious. VirusTotal analysis reveals that 17 of 91 scanned security vendors have flagged the domain, providing a detection ratio of roughly 19 percent and demonstrating that a notable subset of scanners recognize malicious characteristics.

No registrar, hosting IP, ASN, or SSL certificate data are present in the available intelligence, so the underlying infrastructure remains undefined. The paucity of blocklist coverage combined with the moderate VirusTotal detection count suggests that the domain may be newly deployed or that community reporting has not yet converged. Defenders are advised to add 14152.xyz to URL filtering and web proxy deny lists, ensure that endpoint protection products receive the latest threat intelligence feeds, and monitor outbound traffic for connections to the domain.

Until further forensic analysis clarifies the payload or credential‑stealing mechanisms employed, organizations should treat any interaction with the domain as potentially compromising and enforce multi‑factor authentication for affected accounts. Ongoing observation is recommended to capture any future changes, such as additional blocklist listings, increased detection counts, or the emergence of concrete hosting details that would enable more targeted remediation.