banxchangereward[.]com

Analysis as of July 23 2026 indicates that the domain banxchangereward.com is currently taken offline but was previously reachable at IP 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain was registered on February 22 2026 through NiceNIC International Group Co., Limited and is served by the Cloudflare nameservers jonah.ns.cloudflare.com and leah.ns.cloudflare.com. No TLS certificate was observed, meaning HTTPS was not offered at the time of capture. The sole page title returned is the literal string "banxchangereward.com/", and the site was classified as a "Fake Airdrop" scam, suggesting an attempt to lure victims with a pretended cryptocurrency reward.

VirusTotal scans show that six of ninety‑five anti‑malware engines flagged the domain, providing additional corroboration of malicious intent. The domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one third‑party threat‑intel provider has taken remediation action. Because the site is offline, active content cannot be examined, and the exact phishing landing page or payload remains unknown.

Nevertheless, the combination of a recent registration, Cloudflare hosting, lack of TLS, and multiple vendor detections constitutes a clear indicator of abuse. Defensive operators should add 188.114.96.3 and banxchangereward.com to network deny lists, monitor for future resolutions to the same IP range, and enforce strict outbound filtering for unknown airdrop‑related URLs. Continued observation of the registrar NiceNIC and the associated Cloudflare nameservers is advised, as they have been used in recent phishing campaigns.