changeiiy[.]club

This domain changeiiy.club is assessed as elevated risk under a generic_phishing classification, presenting as a fraudulent cryptocurrency exchange platform. The infrastructure is designed to impersonate a crypto trading and swap service, likely targeting credential theft or transaction redirection via a fake exchange interface. The page title reinforces this deception by presenting itself as a low-fee crypto and altcoin swap platform.

Technical indicators confirm multiple malicious signals. VirusTotal reports 18/95 security vendors flagging the domain. It was registered through Global Domain Group LLC and created on February 21, 2026. The domain resolves to IP 62.60.226.213 located in DE under AS214351 FEMO IT SOLUTIONS LIMITED. It appears on 1 security blocklist and is blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt / R12. No GSB status is provided in the dataset.

Although the domain is currently taken offline, historical infrastructure analysis indicates prior deployment for phishing activity targeting crypto users. The combination of moderate detection coverage, active blocklisting, and impersonated financial exchange branding suggests elevated residual risk. Recommended response actions include maintaining domain/IP blocking rules, monitoring for infrastructure reuse under similar naming patterns, and correlating the registrar Global Domain Group LLC with related malicious registrations for proactive threat hunting.