wexalto.com: Confirmed Phishing Site

The domain wexalto.com was registered on July 12, 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently active. It is hosted on Cloudflare infrastructure, as indicated by its authoritative nameservers jean.ns.cloudflare.com and zeus.ns.cloudflare.com, and resolves to the IP address 188.114.96.3, a Cloudflare edge node. VirusTotal analysis shows that five out of ninety‑one security vendors have flagged the domain, providing independent confirmation of malicious behavior.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing threat. The threat type is identified as generic phishing, and the risk level has been assessed as elevated. While the available data confirms the domain’s malicious intent, details such as the site’s SSL certificate, HTTP response codes, page title, or any observed content have not been disclosed, leaving those aspects uncertain.

Defenders should prioritize immediate mitigation: add wexalto.com to DNS blocklists, enforce network‑level filtering, and incorporate the domain into intrusion detection signatures. Ongoing monitoring of the IP address and any future DNS changes is advised, as Cloudflare‑hosted domains can shift endpoints. Continuous review of threat intelligence feeds for additional indicators related to wexalto.com will help maintain an up‑to‑date defensive posture.