dango-exchange[.]com

The domain dango-exchange.com was registered on July 20, 2026 through UnstoppableUS1 LLC and uses the Unstoppable Domains name servers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution points to the IPv4 address 186.2.175.103. The domain appears on a single public blocklist, specifically PhishDestroy, indicating that at least one security organization has identified it as malicious. VirusTotal records show that the domain has been examined by 95 scanning engines, and none of those engines have raised a detection at the time of the latest scan. No additional detections are reported by other aggregators, and the domain is not listed in any other known blocklists. The site remains active as of the report date, July 21, 2026. Analysis confirms that the infrastructure is newly created, with the registration and creation dates only one day apart, suggesting a rapid deployment typical of opportunistic phishing campaigns. The use of the Unstoppable Domains registrar and its associated name servers does not, by itself, imply legitimacy, as the service is frequently leveraged by threat actors to obtain disposable domains. The hosting IP 186.2.175.103 has not been previously associated with known malicious activity in public threat intel, but its recent appearance in conjunction with a newly created domain warrants caution. At present, no page title, SSL certificate details, HTTP response codes, or content snapshots have been captured, leaving the actual payload and target brand undefined. Consequently, defenders cannot confirm which legitimate service the site may be attempting to masquerade as. The lack of visible branding or page analysis creates uncertainty regarding the specific phishing vector employed. Recommended mitigation steps include adding dango-exchange.com to local deny lists, monitoring DNS queries for the domain and its associated name servers, and blocking outbound connections to the resolved IP address.