cexchsg[.]com

PhishDestroy identifies cexchsg.com as an active social engineering drainer kit domain involved in phishing campaigns, currently under investigation for malicious intent. The domain was created on April 13, 2026, and resolves to IP 104.21.67.230 while using a Let's Encrypt SSL certificate. No specific brand or drainer kit has been attributed to this domain yet, but its configuration and behavior align with known malicious drainer kit infrastructure. This domain exhibits multiple red flags with a VirusTotal detection score of 1/95, indicating it remains undetected by most antivirus engines at this time. It is registered through Dynadot Inc, and Google Safe Browsing has flagged it explicitly for SOCIAL_ENGINEERING, though it has not yet been added to major blocklists. The domain’s recent creation date suggests a likely opportunistic campaign targeting unsuspecting users. As of now, cexchsg.com remains active and has not been universally blocked, presenting a moderate risk to users who may encounter it. PhishDestroy continues to monitor this domain, and users should avoid interaction until further investigation concludes. Remaining risk is classified as under investigation pending deeper forensic analysis and potential takedown efforts.