vixo[.]guru

The domain vixo.guru is a generic phishing site targeting cryptocurrency users. It does not impersonate a specific brand but operates as a broad scam page designed to steal credentials or digital assets. As of the latest verification, vixo.guru has been taken offline, though it previously posed an elevated risk due to its phishing activity.

Technical indicators confirm the suspicious nature of vixo.guru. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appears on 2 security blocklists (PhishDestroy and ScamSniffer). It was registered through NameCheap, Inc., though the creation date is not available. The site resolved to the IP address 194.15.36.172, hosted in Germany under AS58087 (Florian Kolb), and used an SSL certificate issued by Let's Encrypt (R13). The observed page title was 'Lexo Challenge,' and the domain's nameservers were dns1.registrar-servers.com and dns2.registrar-servers.com.

Users who interacted with vixo.guru should take immediate safety steps. Since the scam type involves cryptocurrency, victims should revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new wallet. Additionally, monitor accounts for unauthorized transactions and enable two-factor authentication (2FA) on all financial and exchange platforms. To report the domain, submit it to Google Safe Browsing, PhishTank, or the Federal Trade Commission (FTC) at reportfraud.ftc.gov.