decentralize-tokenguide[.]xyz

The domain decentralize-tokenguide.xyz was registered on June 15, 2026 through Hostinger operations, UAB. Its authoritative name servers are cosmos.dns-parking.com and nova.dns-parking.com, and DNS resolution points to the IPv4 address 156.67.74.194. VirusTotal records show that the domain has been scanned by ninety‑five anti‑malware engines, none of which reported a detection at the time of analysis. The same domain appears on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating that multiple threat‑intelligence feeds have flagged it as malicious. The current status in the monitoring platform is “active,” confirming that the domain continues to resolve and host content.

Publicly available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any observed payload. Consequently, the exact phishing campaign vector, targeted brand, or victim profile remains undefined. The lack of visible content analysis creates uncertainty about the specific lures used, but the presence on dedicated phishing blocklists combined with the recent creation date suggests a purpose‑built phishing operation. Defenders should treat the domain as high‑risk.

Recommended actions include adding the fully qualified domain name and its resolving IP address to firewall and proxy deny lists, enforcing DNS‑level blocking for the listed nameservers, and monitoring for any outbound connections to the same IP range. Continuous re‑scanning on multi‑engine platforms is advised to capture any future payload additions. Correlation with other domains that share the same hosting infrastructure may reveal additional malicious assets. Until more detailed forensic data becomes available, the safest posture is to block all traffic to decentralize-tokenguide.xyz.