# changenlly.com — SUSPICIOUS

> Changenlly.com shows low-risk phishing activity targeting crypto users. Stay alert and avoid sharing sensitive info on this site.

## Summary
PhishDestroy identifies changenlly.com as a low-risk generic phishing domain posing as a cryptocurrency exchange platform. The site aims to deceive users by mimicking legitimate crypto services.

This domain resolves to IP 188.114.96.3 and was registered recently on February 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal flags it by only 1 out of 95 security vendors, indicating limited detection but warranting caution.

Currently active, changenlly.com should be avoided for any sensitive transactions. Users are advised to verify URLs carefully and refrain from providing personal or financial data. Monitoring and blocking measures are recommended to mitigate potential risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Cryptocurrency Exchange - Crypto

## Domain Intelligence
- Registered: 2026-02-25 00:00:00
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3
- Nameservers: aarav.ns.cloudflare.com annalise.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/HfhvLrFr/7458b98a8e1a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f78fb265-926c-408e-b350-0e3108ff3b24
- PhishDestroy: https://phishdestroy.io/domain/changenlly.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/changenlly.com/
Last updated: 2026-03-14