17382[.]xyz

This domain, 17382.xyz, was registered on June 02, 2026 through GMO Internet Group, Inc. d/b/a Onamae.com. VirusTotal records show that 17 of 91 security vendors have flagged the domain, indicating a moderate level of detection across multiple scanners. The domain is currently listed on one public security blocklist and is actively blocked by the PhishDestroy service, confirming its presence in at least one defensive feed.

No additional public information such as IP address, hosting provider, SSL certificate details, HTTP response codes, or page title has been disclosed in the available intelligence, leaving the broader infrastructure characteristics unverified. The lack of visible page content or brand targeting means that analysts have not yet determined the exact lure or credential collection method employed. Defenders should prioritize adding 17382.xyz to internal deny lists and DNS filtering rules, as well as monitoring for any outbound connections to the domain from corporate assets.

Continuous ingestion of updated threat feeds that reference this domain will help capture any future changes, such as the emergence of new hosting details or expanded blocklist inclusion. Given the existing vendor detections and the active block by PhishDestroy, the domain should be treated as a high‑confidence indicator of a credential‑harvesting campaign, and remediation steps should include user awareness reminders about unsolicited login requests that may reference this URL.