y112u[.]xyz

Analysis of the domain y112u.xyz indicates that it is currently offline but was previously associated with a generic phishing campaign. The domain was registered on December 14, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 45.119.97.37, which is geolocated to Hong Kong and listed as belonging to SonderCloud Limited. The site was flagged by PhishDestroy and appears on a single public blocklist. AlienVault OTX recorded the domain in one intelligence pulse, confirming its presence in threat‑sharing feeds.

VirusTotal scanned the domain and 16 of 93 security vendors reported a detection, demonstrating moderate detection coverage across the security community. The Gridinsoft trust score of 0 out of 100 reflects an extremely low reputation. The only observable page attribute is the title "y117e.xyz," which does not reveal any targeted brand or service.

No SSL certificate details, HTTP headers, or content snapshots are available, and the site is presently taken offline, limiting immediate risk but preserving historical indicators. Defenders should continue to block the IP 45.119.97.37, add y112u.xyz to local and network‑wide blocklists, and monitor for any re‑registration or resurrection of the domain. Continuous threat‑intel feeds should be consulted for new observations, and any future activity should be correlated with the existing OTX pulse and the existing vendor detections to expedite response actions.