extendedexchange[.]info

The domain extendedexchange.info is currently assessed as high risk due to its association with generic phishing activities. As of August 01, 2026, this domain remains active and appears on three independent security blocklists: PhishDestroy, MetaMask, and SEAL. These blocklist inclusions indicate that multiple threat intelligence sources have independently flagged this domain as malicious, representing a significant risk for users and organizations.

Extendedexchange.info was registered on August 01, 2026, through Spaceship, Inc. The nameservers in use are elias.ns.cloudflare.com and emerie.ns.cloudflare.com, suggesting the use of Cloudflare's infrastructure for DNS and possibly additional protective measures such as proxying or CDN services. The domain currently resolves to the IP address 188.114.96.3. At the time of this report, VirusTotal returned zero detections from 91 vendors, but the absence of detections does not confirm the domain is benign, especially in light of its inclusion on several blocklists. This discrepancy highlights the importance of utilizing multiple threat intelligence sources when assessing risk.

No information about SSL certificate status, HTTP response, page content, or specific scam tactics is available at this time. The exact nature of the phishing content or targeted brands is therefore unconfirmed. Defenders should not rely solely on traditional endpoint or reputation-based detection for this indicator and should instead reference up-to-date blocklists and proactively restrict access to extendedexchange.info across networks. Ongoing monitoring is recommended, as the domain's infrastructure and threat status may change rapidly.