gyroscope-protocol[.]xyz

Analysis of gyroscope-protocol.xyz indicates that the domain is actively being used for a phishing campaign as of the report date, July 29, 2026. The domain was registered on July 22, 2026 through Spaceship, Inc. and resolves to the IPv4 address 186.2.175.35. DNS resolution is served by launch1.spaceship.net and launch2.spaceship.net, confirming the association with the registrar’s infrastructure.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal analysis shows that 1 of 91 security vendors flagged the domain, providing additional independent confirmation of its malicious nature. No further public intelligence such as Safe Browsing status, OTX entries, SSL certificate details, or HTTP response codes is currently available, leaving the full technical profile of the hosting environment partially unknown.

Defenders should immediately add gyroscope-protocol.xyz and its resolved IP address 186.2.175.35 to network‑level deny lists, update DNS filtering policies to block the domain, and monitor for any traffic to the associated nameservers launch1.spaceship.net and launch2.spaceship.net. Continuous re‑evaluation is advised, as the limited detection count suggests that additional security vendors may identify the domain in the near future, potentially expanding the observable threat surface.