xeno-executor[.]lol

Analysis of xeno-executor.lol as of August 06, 2026 shows that the domain is currently active and associated with a generic phishing campaign. VirusTotal reports that 16 out of 91 scanned security vendors classify the domain as malicious, indicating a moderate consensus among detection engines. The domain is listed on a security blocklist and has been explicitly blocked by the PhishDestroy filtering service, providing additional confirmation of its abusive nature.

DNS resolution points to the IPv4 address 216.198.79.1; no further hosting attribution such as ASN or geographic location is supplied in the available intelligence. No public SSL/TLS certificate data, HTTP status codes, or page title information have been disclosed, leaving those vectors unverified. Safe Browsing status, Open Threat Exchange (OTX) references, and registrar details are also absent from the current dataset, which limits the depth of the infrastructure profile.

Given the confirmed detections and blocklist presence, defenders should treat traffic to and from xeno-executor.lol as hostile. Recommended actions include adding the domain to DNS and proxy deny lists, enforcing outbound filtering for the associated IP address, and monitoring for any related indicators of compromise in network logs. Continuous re‑evaluation is advised as additional telemetry, such as SSL certificates or page content, becomes available.