84123[.]xyz

The domain 84123.xyz was registered on December 23, 2025 through Gname.com Pte. Ltd. and is currently listed as active with an elevated risk rating. Independent threat intelligence sources have flagged the domain as a generic phishing operation. PhishDestroy has placed the domain on its blocklist, and it also appears on one additional security blocklist.

VirusTotal analysis shows that 16 of 91 scanned security vendors have identified malicious activity associated with the domain, indicating a non‑trivial detection rate. No further public infrastructure details such as IP address, hosting ASN, or geographic location are disclosed in the available intelligence. The limited visibility means that the exact hosting environment and any underlying command‑and‑control infrastructure remain unknown.

Defenders should continue to block 84123.xyz at network perimeter devices, update DNS filtering policies to include the domain, and monitor for any outbound connections that might originate from compromised clients. Given the existing vendor detections and blocklist entries, it is prudent to treat the domain as hostile and to advise users to avoid any unsolicited communications that reference it. Ongoing observation of threat feeds for additional indicators, such as new malware hashes or URL patterns linked to the domain, is recommended to refine detection rules as the campaign evolves.