limitless-exchange[.]com

limitless-exchange.com is currently listed as offline but retains several indicators of malicious activity that warrant elevated risk. The domain was registered on 29 October 2025 through Name SRS AB and resolves to the Cloudflare address 172.67.217.201, which is associated with ASN 13335 in the United States. Cloudflare’s edge network is frequently abused for fast‑flux and phishing hosting, and the presence of this IP on a security blocklist confirms prior detection. The site lacks an SSL/TLS certificate, a common characteristic of transient phishing infrastructure that does not require encrypted traffic.

The observed page title is “Just a moment…”, providing no substantive content and indicating that the landing page has not been publicly analyzed. VirusTotal scans show that six of ninety‑five security vendors flagged the domain, reinforcing the suspicion of abuse. The domain appears on at least one external blocklist and is specifically identified by PhishDestroy as a “Fake Exchange” phishing campaign. Nameserver configuration uses kaiser.ns.cloudflare.com and laila.ns.cloudflare.com, both standard Cloudflare resolvers, further confirming the reliance on Cloudflare’s CDN.

While the exact payload or credential‑harvesting mechanisms have not been captured, the combination of recent registration, Cloudflare hosting, absence of HTTPS, and multiple vendor detections establishes a credible threat profile. Defenders should add limitless‑exchange.com to URL filtering and DNS block lists, monitor for any resurgence of activity, and consider sinkholing the IP range if organization‑wide mitigation is required. Continuous re‑assessment is advised, as the domain could be re‑activated or repurposed for new phishing campaigns.