changenowio[.]co

ChangeNOWIO.CO is currently flagged as a high-risk generic phishing domain. The domain was created on June 18, 2026, and is actively resolving to the IP address 130.12.180.128. A thorough analysis of the domain's infrastructure indicates that it is hosted using Nginx and OpenResty, technologies commonly employed in web serving. The page title found on the site is 'ChangeNOW | Swap & Exchange', which may mislead users into believing the domain is associated with legitimate cryptocurrency exchange services. There is notable concern surrounding this domain, as it has been identified in 19 threat intelligence pulses within AlienVault OTX, reflecting a significant level of scrutiny from the security community.

Furthermore, ChangeNOWIO.CO has been blocked by multiple security solutions including SEAL, MetaMask, PhishDestroy, and BLP-Malware. These blocks indicate that various security mechanisms have recognized the domain as a potential threat, aligning with its classification as a phishing site. The domain has also been listed on four security blocklists, reinforcing its malicious reputation. Analyzing data from VirusTotal reveals that 14 out of 95 security vendors have flagged this domain, further emphasizing the risks associated with engaging with it.

Gridinsoft has assigned a trust score of 0 out of 100 to ChangeNOWIO.CO, which is indicative of a highly negative assessment by their security metrics. Defenders should consider implementing proactive measures to block access to this domain across their networks and educate users about the risks of engaging with phishing sites that masquerade as legitimate entities. Continuous monitoring and threat intelligence updates will be essential in identifying and mitigating risks associated with this and similar domains.