xp-markets[.]net-pages[.]xyz

The domain xp-markets.net-pages.xyz is presently classified as an active generic phishing resource. VirusTotal analysis shows that two of ninety-one scanning vendors have flagged the domain as malicious, indicating that at least a small subset of security tools have identified suspicious behavior associated with the host. The domain also appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that it is being used for phishing-related activities.

DNS resolution points to the address 104.21.49.181, which can be added to network deny lists as a precautionary measure. No additional intelligence such as registrar details, SSL certificate information, HTTP response codes, or page title data is currently available, leaving the broader infrastructure context largely uncharacterized. Given the limited but concrete evidence—multiple vendor detections, blocklist inclusion, and active blocking by a dedicated anti‑phishing platform—defenders should treat the domain as a high‑confidence malicious indicator.

Recommended mitigation steps include adding xp-markets.net-pages.xyz to URL filtering policies, denying outbound connections to its resolved IP address, and monitoring for any traffic patterns that reference the domain or its IP. Continuous re‑evaluation is advised, as further analysis may reveal additional infrastructure components or campaign tactics that could extend the threat landscape.