chan-genow[.]com

PhishDestroy identifies chan-genow.com as a fraudulent website posing as the legitimate cryptocurrency exchange ChangeNOW. This phishing domain attempts to trick users into entering sensitive credentials or transferring funds to attacker-controlled wallets by leveraging the platform's trusted reputation. The page title closely mirrors ChangeNOW's legitimate branding, suggesting a deliberate impersonation campaign targeting crypto investors. Threat actors often exploit minor typographical or phonetic variations in domain names to deceive victims, and this domain follows that pattern with subtle changes to appear authentic.

This domain was flagged during routine monitoring after its creation on March 10, 2026, which is notably recent and aligns with the campaign's likely deployment window. Registered through Dynadot Inc, chan-genow.com resolves to IP address 176.125.242.151 and utilizes a Let's Encrypt SSL certificate to enhance its appearance of legitimacy. Crucially, VirusTotal currently reports 2 out of 95 detection engines identifying the site as malicious, indicating it has yet to be widely blacklisted despite its active status. Such low detection rates often occur with newly deployed phishing domains that evade initial scrutiny.

If you visited chan-genow.com, do not enter any personal or financial information, including login credentials or wallet addresses. Disconnect from the site immediately and clear your browser's cookies for this domain. Check your device for signs of compromise, such as unauthorized crypto transactions or unfamiliar browser extensions. Report the domain to your organization's security team or to platforms like PhishDestroy for further analysis. Avoid interacting with similar domains offering unsolicited crypto services or 'too good to be true' exchange rates, as these are common tactics used to lure victims. Always verify the legitimacy of crypto platforms by using official bookmarks or trusted sources to navigate to exchange websites.