nn6n[.]xyz

The domain nn6n.xyz is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or utilize a known crypto drainer kit. As of the latest verification, nn6n.xyz has been taken offline, though it previously posed an elevated risk of phishing-related fraud.

Technical analysis reveals that nn6n.xyz was flagged by 3 of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker, Gridinsoft, and SOCRadar. The domain was registered through Dynadot LLC on May 19, 2025, and resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and had a Gridinsoft trust score of 0/100. No SSL certificate was issued, and the observed page title was 'nn6n.xyz'. The domain used nameservers ns1.dyna-ns.net and ns2.dyna-ns.net.

Users who may have interacted with nn6n.xyz should immediately change any exposed passwords, enable two-factor authentication (2FA) on critical accounts, and monitor for unauthorized access or fraudulent activity. If financial or crypto assets were involved, review transaction histories for suspicious activity. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to assist in broader threat mitigation.