rlusdswap[.]org

Analysis of rlusdswap.org indicates that the domain was registered on July 11, 2026 through the registrar Spaceship, Inc. The authoritative name servers listed are launch1.spaceship.net and launch2.spaceship.net, and DNS resolution maps the domain to the IP address 186.2.175.35. VirusTotal records show that six of ninety-one security vendors have flagged the domain, suggesting that a minority of scanners have identified malicious characteristics. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one anti‑phishing platform considers it malicious.

The current operational status is reported as active, meaning the domain continues to resolve and respond to network queries. The available evidence does not disclose additional attributes such as SSL certificate details, HTTP response codes, or page titles, leaving those aspects unverified.

Defenders should prioritize adding the domain and its associated IP address to local deny lists, monitor outbound connections to the 186.2.175.35 endpoint, and enforce existing phishing detection rules that reference the six vendor detections. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators of compromise or activity patterns associated with this high‑risk phishing infrastructure.