wabgyu[.]xyz

The domain wabgyu.xyz is classified as a high‑risk generic phishing site and remains active as of the report date, July 19 2026. HTTP requests to the domain return a 301 redirect and resolve to the IP address 185.165.169.123, which is hosted by FlokiNET in Romania. The domain is registered through Spaceship, Inc. and uses the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. The only publicly visible page title is "Wagyu | Private Cross‑Chain Bridge," indicating the site is attempting to reference the Wagyu brand, but the page content has not been publicly analysed beyond the title. Reputation data shows that 13 of 91 VirusTotal security vendors have flagged the domain, and AlienVault OTX reports the indicator in two separate threat‑intel pulses. The domain appears on three external blocklists and is already blocked by PhishDestroy, MetaMask, and SEAL. No additional technical artifacts such as malware payloads, credential‑stealing forms, or command‑and‑control infrastructure have been disclosed. Defenders should immediately block the domain and its resolving IP at perimeter and DNS layers, incorporate the indicator into existing phishing detection rules, and monitor for any traffic targeting the Wagyu brand or related cross‑chain bridge terminology. Continued observation of the domain’s DNS records and any associated URLs is advised to detect potential evolution of the phishing campaign.