wagyu7[.]xyz

Analysis indicates that the domain wagyu7.xyz is an active phishing site targeting users of cross-chain bridge services. Registered on January 17, 2026, through Spaceship, Inc., the domain resolves to the IP address 185.165.169.123 and is currently flagged by three security blocklists, including SEAL and MetaMask. The site presents itself under the page title 'Wagyu | Private Cross-Chain Bridge,' suggesting an attempt to deceive users into interacting with fraudulent blockchain infrastructure. Infrastructure analysis reveals the use of Let's Encrypt for SSL certification, a common tactic to lend superficial legitimacy to phishing domains. The domain is detected by 8 of 95 security vendors, as recorded in available scans, and appears in four threat intelligence pulses on AlienVault OTX. Technologies identified on the domain include Python, Flask, Caddy, Cloudflare, and HTTP/3, which may be leveraged to obscure malicious activity or enhance the site's perceived authenticity. The domain remains active as of July 12, 2026, with a trust score of 0/100, indicating a high-risk classification. Defenders are advised to block the domain and its associated IP address at the network level and monitor for related infrastructure, such as domains registered through the same registrar or resolving to the same IP range. The exact content and functionality of the site have not yet been fully analyzed, but the available evidence confirms its classification as a phishing threat.