b236g[.]xyz

As of July 23, 2026, the domain b236g.xyz is flagged as a generic phishing site with an elevated risk level. The domain was created on February 21, 2026, and currently resolves to the IP address 45.196.247.147, which is located in Hong Kong and hosted by Nebula Global LLC. The domain has been taken offline and is blocked by the PhishDestroy system. Analysis indicates that the domain has been mentioned in two threat intelligence pulses on AlienVault OTX, suggesting it has been associated with known phishing campaigns.

Additionally, 15 out of 93 security vendors on VirusTotal have flagged this domain as malicious, highlighting the potential threat it poses. The domain's page title is simply 'b236g.xyz', which does not provide any specific information about its content or the brand it may be impersonating. Defenders should remain vigilant and ensure that this domain is added to their blocklists to prevent any accidental access by users.

Given the elevated risk level and the presence on multiple threat intelligence platforms, it is advisable to monitor for any related indicators of compromise and to educate users about the risks of phishing sites. The exact nature of the content hosted on this domain prior to it being taken offline is not yet analyzed, but the available evidence strongly suggests that it was used for phishing activities. Security teams should also consider investigating the hosting infrastructure and IP address 45.196.247.147 for any additional malicious activities or related domains.