# cexha.com — MALICIOUS

> PhishDestroy flags cexha.com as a crypto drainer impersonating a brand. 8/95 VirusTotal vendors detected this phishing site registered on April 02, 2026.

## Summary
PhishDestroy identifies cexha.com as an active crypto drainer phishing domain with an elevated risk rating. The site masquerades as a legitimate platform to deceive users into approving malicious wallet transactions, enabling unauthorized crypto transfers.

This domain was flagged by PhishDestroy after 8 out of 95 VirusTotal security vendors detected malicious content. The domain was registered through Name SRS AB on April 02, 2026, and resolves to IP address 18.245.31.59. The SSL certificate is issued by Amazon, but trust indicators remain critically low due to the high detection rate and recent registration date. No known blocklists were confirmed at the time of analysis, though the domain’s behavior aligns with emerging crypto drainer campaigns targeting cryptocurrency holders.

Users should avoid visiting cexha.com and verify any similar sites using PhishDestroy’s real-time scanning tool. Never connect wallets or approve transactions on unsolicited or unverified domains. If interaction occurred, revoke any unauthorized wallet approvals immediately via blockchain explorers or wallet interfaces. Report the domain to PhishDestroy’s database to help protect the cybersecurity community from evolving crypto threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-02 21:04:38
- Registrar: Name SRS AB
- IP: 18.245.31.59

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/cexha.com
- PhishDestroy: https://phishdestroy.io/domain/cexha.com/
- LLM endpoint: https://phishdestroy.io/domain/cexha.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cexha.com/
Last updated: 2026-04-10