fixedfloat-info[.]xyz

This domain, fixedfloat-info.xyz, is identified as a phishing site specifically targeting cryptocurrency users by impersonating a legitimate exchange platform. The site presents a fraudulent interface designed to harvest login credentials, private keys, or wallet recovery phrases, enabling unauthorized access to digital assets. Additionally, it may facilitate fraudulent transactions by tricking users into transferring funds to attacker-controlled wallets under the guise of deposit or withdrawal processes. The threat extends to potential malware distribution if users interact with embedded scripts or downloadable content from the site. Analysis indicates the domain exhibits multiple high-risk indicators. It is flagged by 5 out of 95 security vendors on VirusTotal, and appears on 3 distinct security blocklists. The domain was registered on June 15, 2024, through DYNADOT LLC, a registrar frequently associated with malicious registrations. Infrastructure analysis reveals the domain resolves to the IP address 172.67.172.111, utilizing Cloudflare for content delivery and Google Trust Services for SSL certification, which may obscure the true origin of the malicious activity. The Gridinsoft trust score of 0/100 further corroborates its classification as a high-risk entity. Users who have visited fixedfloat-info.xyz or interacted with its content should take immediate remedial actions. Disconnect any active sessions and revoke permissions granted to the site in wallet applications or browser extensions. Scan local devices for malware using updated security tools, focusing on detecting credential stealers or remote access trojans. Reset passwords and recovery phrases for all cryptocurrency exchange accounts and wallets, prioritizing those accessed during the exposure window. Monitor financial transactions for unauthorized activity and report the domain to relevant security teams or threat intelligence platforms for further mitigation.