floatexchanger[.]com

The domain floatexchanger.com is a confirmed phishing site engaged in brand impersonation targeting Ethereum users. It presents itself as a cryptocurrency exchange under the name 'FloatExchanger' to deceive victims into disclosing wallet credentials or transferring funds, though no active drainer kit was identified. As of the latest verification, floatexchanger.com has been taken offline.

Technical indicators confirm the malicious nature of floatexchanger.com. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through REGRU-RU on April 05, 2025, it resolves to the IPv6 address 2606:4700:3035::6815:c2c, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | FloatExchanger'. Gridinsoft and Scamadviser both assigned a trust score of 1/100, and AlienVault OTX recorded the domain in 1 threat intelligence pulse.

Victims of floatexchanger.com should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand (Ethereum) via their official security channels, and submit the URL to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.