exchallenges[.]net

Analysis of exchallenges.net confirms it as a brand impersonation phishing domain targeting Celer, a known blockchain and gaming infrastructure provider. The domain was registered on November 3, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP address 45.155.69.6, hosted in the Netherlands under AS214927 (PSB HOSTING LTD). No SSL certificate is present, increasing the risk of unencrypted credential harvesting or malware distribution. The domain is flagged by 15 of 95 security vendors on VirusTotal, indicating moderate detection coverage, and appears in 16 threat intelligence pulses on AlienVault OTX, suggesting active tracking by defenders.

It is blocked by PhishDestroy and listed on at least one security blocklist. The page title, 'Global | eSports and Gaming Community,' aligns with Celer's branding focus, reinforcing the impersonation intent. Trust scores from Gridinsoft and Scamadviser are both 1/100, further corroborating malicious activity. Infrastructure analysis reveals the use of four nameservers (dns1.regway.com through dns4.regway.com), a common tactic to enhance resilience against takedowns.

The domain is currently offline, but defenders should treat any reactivation as high-risk. No specific phishing kit or payload has been confirmed, but the combination of brand impersonation, low trust scores, and detection by multiple vendors justifies elevated alert levels. Defenders are advised to block the domain and its associated IP at the network level, monitor for related infrastructure (e.g., regway.com nameservers), and alert users to potential Celer-themed phishing attempts. Given the domain's recent creation and offline status, further monitoring of the hosting provider (PSB HOSTING LTD) and registrar (PublicDomainRegistry.com) may reveal additional linked threats.