barbados-exchanger[.]com

Analysis of the domain barbados-exchanger.com indicates active impersonation of Ethereum, a well-known cryptocurrency platform. The domain was registered on March 13, 2026, through Internet Domain Service BS Corp. and currently resolves to IP address 172.67.153.211. The page title, 'Barbados Exchange — Быстрый и безопасный криптообмен | Обмен Bitcoin, USDT, Ethereum,' explicitly references Ethereum alongside other cryptocurrencies, reinforcing the brand impersonation classification. Security vendors have flagged this domain, with 4 of 95 detecting it as malicious on VirusTotal. It appears in 14 threat intelligence pulses on AlienVault OTX and is blocked by multiple security mechanisms, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. The domain is also listed on four security blocklists, further corroborating its malicious status. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites to avoid browser warnings. While the exact content and functionality of the site remain unanalyzed, the combination of brand impersonation, cryptocurrency references, and widespread security vendor detections strongly suggests it is designed to deceive users into disclosing sensitive information or transferring funds. Defenders should treat this domain as high-risk infrastructure and implement blocking measures at the network and endpoint levels. Monitoring for related domains registered through the same registrar or resolving to the same IP may uncover additional components of this campaign.