17338[.]xyz

The domain 17338.xyz was registered through GMO Internet Group, Inc. d/b/a Onamae.com on June 02, 2026. Shortly after creation the domain appeared on a security blocklist and was incorporated into the PhishDestroy feed, indicating that threat‑intel operators have already observed malicious activity linked to the name. VirusTotal reports that 17 of 91 security vendors flagged the domain as malicious, providing a measurable consensus that the site is being used for phishing‑related purposes.

The threat type recorded is generic phishing, and the risk level is elevated, with the current status marked as active. No public data on the hosting IP address, autonomous system, geographic location, SSL certificate details, or HTTP response codes has been released, and the page title or visible content has not been publicly analysed, leaving the exact lure and victim profile uncertain. Defenders should immediately add 17338.xyz to URL‑filtering, DNS‑sinkhole, and endpoint‑block lists, and monitor outbound connections for any attempts to resolve or contact the domain.

Continuous re‑evaluation on VirusTotal and other sandbox platforms is recommended, as additional detections may surface. Organizations are advised to enforce multi‑factor authentication, educate users about unsolicited login requests, and share indicators of compromise with relevant information‑sharing communities to mitigate the emerging credential‑harvesting infrastructure.