hgc2x[.]xyz

The domain hgc2x.xyz was set up to host a deceptive page titled "活动" (Activity), likely aimed at tricking visitors into entering personal information. This is a classic generic phishing setup, where the page mimics a legitimate activity or event to steal credentials or other sensitive data. The site is now offline, but while it was active, anyone stumbling upon it could have been duped into revealing private details.

PhishDestroy's investigation shows that hgc2x.xyz was created on February 27, 2026, through NameCheap, Inc., and was flagged by 4 out of 95 security vendors on VirusTotal. It resolves to IP address 45.207.200.96 and appears on three security blocklists. The site had no SSL certificate, meaning any data sent to it was transmitted without encryption, making it even more dangerous. These indicators confirm that this was a malicious domain designed for phishing.

If you visited hgc2x.xyz and entered any information, act immediately: change passwords for any accounts you might have used, enable two-factor authentication, and monitor your financial accounts for suspicious activity. Consider running a security scan on your device and reporting the incident to your email provider or IT department. Even though the site is offline, the criminals behind it may still have your data, so staying vigilant is key.