swap-xrp[.]xyz

The domain www.swap-xrp.xyz was registered through NameSilo, LLC on July 02 2026 and is currently active. It is hosted on IP address 186.2.175.35 and uses the DNS Owl name servers ns1.dnsowl.com, ns2.dnsowl.com and ns3.dnsowl.com. The domain appears on a single security blocklist and is listed by PhishDestroy as malicious, indicating that threat‑intelligence feeds have already flagged it for phishing activity.

VirusTotal records show that the site has been scanned by 91 antivirus and URL‑reputation engines; none of those engines reported a detection at the time of analysis, but the absence of a detection does not constitute validation of safety. The short age of the domain—less than one month old at the time of this report—combined with its presence on a phishing‑specific blocklist suggests that it was purpose‑built for credential‑harvesting or similar fraudulent campaigns. No public SSL certificate details, HTTP response codes, or page‑title information are available, limiting the ability to confirm the exact content served.

Consequently, the primary confidence in the malicious classification derives from the blocklist entry, the PhishDestroy listing, and the infrastructure pattern typical of newly registered phishing domains. Defenders should add www.swap-xrp.xyz to network‑level deny lists, monitor traffic to the associated IP address, and consider sweeping any endpoints that may have interacted with the URL for credential leakage. Ongoing observation is recommended to detect any future shifts in detection status or the appearance of additional indicators such as malware payloads or command‑and‑control communications.