dexalotswap[.]xyz

Analysis of dexalotswap.xyz indicates that the domain was registered on July 22, 2026 through Spaceship, Inc. and is currently using the authoritative name servers launch1.spaceship.net and launch2.spaceship.net. DNS resolution points to the IPv4 address 186.2.175.35, confirming that the domain is actively reachable. The domain appears on a single security blocklist and has been flagged by the PhishDestroy feed, suggesting that it is being monitored for malicious activity.

VirusTotal records show that the domain was examined by 91 scanning engines, none of which reported a detection at the time of analysis; this absence of detections does not constitute evidence of safety and should be interpreted as a lack of current signatures rather than a clean bill of health. No public information is available regarding SSL/TLS configuration, HTTP response codes, page title, or any content served by the site, leaving those facets of the infrastructure unverified. The limited data set prevents a definitive attribution of the phishing campaign’s target or its operational scope, but the combination of recent registration, dedicated name servers, active hosting, and inclusion on a phishing‑focused blocklist aligns with typical patterns observed in newly deployed phishing infrastructure.

Defenders should consider adding dexalotswap.xyz to internal blocklists, monitoring DNS queries for the associated IP address, and employing heuristic detection for traffic directed to the domain. Continuous re‑evaluation is advised, as future scans or threat‑intel updates may reveal additional indicators such as malicious payloads, credential‑harvesting forms, or changes in hosting characteristics.