fixedfloat-exchange[.]to

The domain fixedfloat-exchange.to was registered on April 04, 2026 through the Government of Kingdom of Tonga. It currently resolves to the Cloudflare IP address 172.67.148.187, which is geolocated to Canada. The authoritative nameservers are cosmin.ns.cloudflare.com and ulla.ns.cloudflare.com. The site presents an HTTP 200 response and serves a TLS certificate issued by Google Trust Services under the WE1 root. Infrastructure analysis shows the domain is actively listed on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports a single positive detection out of ninety‑five scanners, and Gridinsoft assigns a trust score of zero out of one hundred. AlienVault OTX references the domain in one threat‑intel pulse, and the observed page title is “Just a moment…”. The scam type is identified as a Fake Exchange, indicating an attempt to impersonate a cryptocurrency exchange platform. Publicly available data does not disclose the full content of the site beyond the generic page title, and no additional indicators such as malicious payloads, credential‑harvesting forms, or redirection chains have been observed. Consequently, the precise tactics used to lure victims remain uncertain, though the classification as a Fake Exchange suggests a focus on financial deception. Defenders should continue to block fixedfloat‑exchange.to at network perimeters and DNS filtering layers, given its presence on multiple blocklists and its zero trust score. Monitoring for DNS queries to the associated Cloudflare nameservers and for TLS connections to the Google‑issued certificate can provide early warning of attempted access. Incident response teams should treat any credential or payment data submitted to this domain as compromised and advise affected users to change credentials and verify transactions.