blyniwex[.]com

This domain, blyniwex.com, is flagged as an active cryptocurrency phishing site targeting users of the Ethereum platform. Registered on March 10, 2025, through NiceNIC International Group Co., Limited, the domain currently resolves to IP address 172.67.189.208, hosted on AS13335 (Cloudflare, Inc.) in the United States. The page title, 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | BlyniWex,' explicitly references Ethereum, aligning with the documented brand impersonation threat type. Analysis indicates the site remains operational, returning an HTTP 200 status code, and has not implemented an SSL certificate, a common red flag in fraudulent financial platforms. Infrastructure analysis reveals minimal legitimate credibility, with a Gridinsoft trust score of 1/100 and a Scamadviser trust score of 1/100. The domain appears on one security blocklist and is flagged by two out of ninety-five security vendors on VirusTotal, suggesting limited but growing detection. The use of a single nameserver and absence of SSL encryption further reduce its technical legitimacy. While the exact content and functionality of the site have not been analyzed, the combination of brand impersonation, cryptocurrency focus, and poor trust metrics strongly indicates malicious intent. Defenders should prioritize blocking or monitoring this domain, particularly in environments where cryptocurrency transactions occur. The lack of SSL encryption increases the risk of credential interception, and the domain’s association with Cloudflare infrastructure may complicate takedown efforts. Given its active status and low detection rate, additional scrutiny of related domains or IP ranges may uncover broader phishing campaigns. Organizations should also consider alerting users to the risks of interacting with uncertified cryptocurrency exchanges, especially those mimicking established brands like Ethereum.