18923[.]xyz

The domain 18923.xyz has been identified as a high-risk generic phishing threat. It is currently active and does not seem to involve any notable brands or specific drain kits at this time. The nature of the threat indicates potential attempts to deceive users into providing sensitive information through fraudulent means, consistent with typical phishing schemes.

Technical indicators for this domain include a VirusTotal score of 16 out of 95 security vendors flagging it as malicious. The domain is registered with GMO Internet, Inc., and currently resolves to the IP address 103.27.177.164. It was created on June 10, 2026. As of now, it has not been detected by Google Safe Browsing, although it is crucial to note the presence of ongoing concerns surrounding its legitimacy. The blocklist count indicates 16 security vendors are actively monitoring this domain for potential threats.

Currently, 18923.xyz remains active and poses a significant risk for phishing attacks. Immediate response actions should include blocking access to the domain in all organizational systems to mitigate exposure. Continuous monitoring of this domain is recommended to assess any changes in its status or tactics employed by its operators. The risk remains high due to its ongoing operation and the speed with which phishing threats can evolve.