wombat-exchange[.]xyz

This domain, wombat-exchange.xyz, is under investigation as part of a cryptocurrency exchange phishing campaign. Registered on July 22, 2026, through Spaceship, Inc., the domain currently resolves to the IP address 186.2.175.35. Infrastructure analysis reveals the use of nameservers launch1.spaceship.net and launch2.spaceship.net, consistent with the registrar's hosting services. As of July 29, 2026, the domain appears on one security blocklist, specifically PhishDestroy, though it remains unflagged by other major threat intelligence platforms.

A VirusTotal scan conducted by 91 vendors returned no detections; however, the absence of detections does not confirm the domain's safety and should not be interpreted as an all-clear. The domain remains active, with no additional context available regarding its exact content or targeted brand. No evidence links it to a specific phishing kit or known threat actor at this time.

Defenders are advised to treat this domain as potentially malicious, particularly in environments where cryptocurrency-related activity is monitored. Network-level blocking or monitoring of connections to 186.2.175.35 is recommended pending further analysis. If additional details emerge—such as page content, brand impersonation, or user reports—this assessment will be updated accordingly.