rezorswap[.]xyz

rezorswap.xyz was registered on 17 July 2025 through the Hostinger Operations, UAB registrar. The domain resolves to the IPv4 address 2.57.91.167, which belongs to AS47583 Hostinger International Limited and is geolocated in Cyprus. Nameserver resolution points to ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or unused domains. No TLS certificate is presented, indicating the site does not serve traffic over HTTPS.

The Gridinsoft trust score of 0 out of 100 classifies the domain as highly untrustworthy. Threat intelligence platforms have listed rezorswap.xyz on three public blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming a consensus that the domain is used for phishing-related activity. VirusTotal reports that two of ninety-one scanned scanners flagged the domain, reinforcing the malicious assessment. As of the report date, the domain is taken offline, limiting immediate exposure but preserving the forensic footprint.

The available evidence does not include a captured page title, brand targeting, or specific phishing kit, so the exact payload or victim profile remains unknown. Defenders should continue to deny any network traffic to 2.57.91.167, add rezorswap.xyz to DNS and proxy blocklists, and monitor for re-registration or resurrection of the site. Additional investigation, such as requesting historical web captures or conducting sandbox analysis if the site reappears, would be required to determine the full scope of the phishing campaign.