wstusdt[.]xyz

Analysis indicates the domain wstusdt.xyz was registered on July 09, 2026 via Spaceship, Inc. The authoritative name servers are launch1.spaceship.net and launch2.spaceship.net, and DNS resolution points to IP 186.2.175.35. VirusTotal scanning shows three of ninety‑one security vendors have flagged the domain, indicating a non‑trivial detection rate. The domain is listed on at least one public security blocklist and is actively blocked by the PhishDestroy mitigation service. The current operational status is reported as active.

No public information about SSL certificates, HTTP response codes, page title, or content has been published, so the surface‑level characteristics of the site remain unknown. Defenders should treat any traffic to wstusdt.xyz as malicious. Immediate actions include adding the domain to internal blocklists, configuring web proxies or firewalls to deny outbound connections, and updating endpoint detection rules to flag attempts to resolve or contact the IP 186.2.175.35. Monitoring of DNS queries for the two launch*.spaceship.net name servers can provide early indication of reuse.

Because the domain is newly created and already associated with phishing activity, any user‑initiated credential submission to the site should be considered compromised. Organizations should also review recent phishing reports for references to wstusdt.xyz and consider notifying users of the emerging threat. Continuous re‑evaluation is advised as additional intelligence, such as page content or SSL fingerprint, becomes available.