dcsi23[.]swoop2[.]me

The domain dcsi23.swoop2.me was registered on March 07, 2023 through Porkbun LLC and remains active as of July 18, 2026. DNS resolution points to the IP address 172.67.186.142, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 profile. No nameserver information is available in the current intelligence set. VirusTotal analysis shows that 11 of 91 security vendors have flagged the domain, indicating a non‑negligible likelihood of malicious use. The threat classification is generic_phishing, and the risk level has been assigned as high with an active status. At present, the specific payload, phishing page content, or targeted brand have not been disclosed, leaving the exact attack vector uncertain. Defenders should block network traffic to this domain and add the associated IP address to deny lists. Continuous monitoring of DNS queries for the domain and any related subdomains is recommended, as is periodic re‑scanning to capture any changes in vendor detections. Given the presence of a trusted certificate, reliance on TLS alone is insufficient; endpoint security solutions should enforce URL reputation checks and alert on any attempts to connect to dcsi23.swoop2.me.