fluxion[.]exchange

The domain fluxion.exchange was registered on February 21, 2026 through Dynadot LLC and is hosted on Cloudflare’s network (AS13335). DNS resolution points to the IP address 172.67.153.207, which is located in the United States and belongs to Cloudflare, Inc. The site presented an HTTP 200 response and advertised the page title "Fluxion". TLS termination is performed by Google Trust Services under the WE1 certificate, confirming the use of a legitimate certificate authority but offering no indication of legitimate ownership. Cloudflare services, including HTTP/3 support, are observed, and the authoritative nameservers are hera.ns.cloudflare.com and donald.ns.cloudflare.com.

Security telemetry shows the domain was flagged by multiple anti‑phishing platforms: PhishDestroy, MetaMask, and SEAL have listed it as malicious, and three independent blocklists also contain the domain. Gridinsoft assigned a trust score of 0 out of 100, indicating a high confidence of abuse. VirusTotal analysis recorded a single positive detection out of 95 scanned engines, reinforcing the suspicion. The classification supplied identifies the activity as a "Fake Exchange" scam, suggesting the domain was intended to impersonate a cryptocurrency exchange platform to harvest credentials.

The current operational status is offline, which may be the result of takedown actions or temporary hosting changes. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and correlate any credential‑theft alerts with this indicator. Threat hunters should also examine logs for connections to the Cloudflare IP range associated with this domain and verify that no residual malicious payloads remain on compromised endpoints.