logewix[.]com

This domain, logewix.com, is actively flagged as a high-risk brand impersonation targeting Ethereum users. Analysis indicates the site presents itself as a cryptocurrency exchange under the title 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Vogart,' though the exact content and functionality remain unconfirmed. Infrastructure reveals the domain was registered on March 24, 2025, through NiceNIC International Group Co., Limited, and currently resolves to IP 104.21.80.1, which is protected by Cloudflare. The SSL certificate is issued by Let's Encrypt, a common but not inherently malicious provider. Multiple threat intelligence sources corroborate its malicious classification. The domain appears in 25 AlienVault OTX pulses and is blocked by at least two security blocklists, including PhishDestroy and BLP-Malware. Gridinsoft assigns it a trust score of 1 out of 100, further indicating high risk. While six of 95 security vendors on VirusTotal flag the domain, this detection rate alone does not confirm its full scope or payload. Defenders should treat this domain as an active threat. The combination of brand impersonation, low trust scores, and presence on multiple blocklists suggests it is likely part of a broader campaign to deceive cryptocurrency users. Immediate action should include blocking the domain and IP at the network level, monitoring for related indicators of compromise, and alerting users to avoid interaction. Further analysis of the site’s behavior, if accessible, may reveal additional infrastructure or associated campaigns.