xpoalswwkjddsljsy[.]com

xpoalswwkjddsljsy.com is flagged as a generic phishing domain with an elevated risk level. The domain does not target any specific brand or use a drainer kit. The primary threat is the potential for credential theft and financial fraud.

Infrastructure analysis reveals that xpoalswwkjddsljsy.com was created on October 09, 2025. The domain does not have an SSL certificate, which is a common indicator of phishing sites. It is registered through NiceNIC International Group Co., Limited and resolves to the IP address 193.24.211.233, located in Bulgaria (BG) and associated with AS215929 Data Campus Limited. According to VirusTotal, 19 out of 95 security vendors flagged this domain as malicious. The domain also appears on 1 security blocklist and is listed in Google Safe Browsing (GSB) as a potential threat.

The domain is currently offline, having been taken down as part of a coordinated response to mitigate the threat. Despite this, the infrastructure used to host the domain (IP address 193.24.211.233) remains active and should be monitored for any future malicious activity. The remaining risk is moderate, as the domain could be reactivated or repurposed by threat actors. Organizations are advised to update their security blocklists and perform a thorough review of any interactions with this domain to ensure no data has been compromised.