cha-ngelly[.]com

This domain, cha-ngelly.com, operates as a fraudulent cryptocurrency exchange platform designed to impersonate a legitimate service. The site presents itself as a crypto swap and trading interface, using the branding and page title of a well-known exchange to deceive users into entering sensitive credentials or transferring digital assets. Analysis indicates the site functions as a phishing endpoint, likely intended to harvest login details, private keys, or facilitate unauthorized transactions, placing users at high risk of financial loss and account compromise. Infrastructure analysis reveals multiple technical indicators confirming the malicious nature of this domain. The domain was registered on April 26, 2026, through Dynadot Inc, a registrar frequently associated with phishing activity. It resolves to the IP address 176.125.242.151 and is hosted on an Nginx server. Security vendors on VirusTotal flagged the domain 17 out of 95 times, with detections including social engineering and phishing classifications. Additionally, the domain appears on four security blocklists and is blocked by multiple threat intelligence platforms, including MetaMask and PhishDestroy. The Scamadviser and Gridinsoft trust scores of 1/100 and 0/100, respectively, further corroborate its fraudulent status. Users who visited cha-ngelly.com or interacted with the site should take immediate action to mitigate potential risks. Disconnect any active sessions linked to the domain and revoke permissions granted to associated wallet addresses or browser extensions. Scan local devices for malware using updated security tools to detect any compromise. If credentials or private keys were entered, transfer assets to a new, secure wallet and monitor accounts for unauthorized transactions. Report the incident to relevant financial platforms and consider filing a complaint with the domain registrar, Dynadot Inc, providing all evidence of fraudulent activity. Exercise heightened caution with future crypto-related communications, verifying domain authenticity before any interaction.