xolodex[.]com

This domain poses as a cryptocurrency exchange platform specifically targeting Ethereum users through brand impersonation. The site displays a page title 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | XOLODEX' and mimics legitimate exchange interfaces to deceive visitors into submitting wallet credentials or transferring funds to attacker-controlled addresses. The fraudulent infrastructure is designed to harvest sensitive financial information under the guise of a trusted Ethereum service provider. Analysis indicates the domain was registered on April 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. Security vendors on VirusTotal flagged this domain with 14 out of 95 detections, while it appears on two independent security blocklists. The site resolved to IP address 104.21.81.35 and employed technologies including Chart.js, Cloudflare, and Facebook Pixel to enhance its deceptive appearance. Google Safe Browsing classified the domain under the 'SOCIAL_ENGINEERING' category, confirming its intent to manipulate users through fraudulent means. Users who visited xolodex.com should immediately revoke any permissions granted to the site in their cryptocurrency wallets and monitor their accounts for unauthorized transactions. Any credentials entered on this domain should be considered compromised and changed across all platforms where they were reused. It is recommended to scan local devices for malware, as phishing sites often distribute additional payloads. Ethereum users are advised to verify exchange URLs through official documentation and enable multi-factor authentication on all financial accounts to mitigate future risks.