trustxaucrypto[.]com

This domain, trustxaucrypto.com, is actively impersonating Crypto.com as part of a high-risk phishing operation. Registered on April 22, 2026, through Gname.com Pte. Ltd., the site resolves to Cloudflare IP 104.21.80.66 (AS13335, CA) and uses Cloudflare nameservers (rosalyn.ns.cloudflare.com, viddy.ns.cloudflare.com). The page title, 'Buy & Sell your cryptos and foreign exchange,' directly aligns with Crypto.com's service offerings, reinforcing the brand impersonation classification. Analysis indicates a 302 HTTP redirect status, which may be used to obscure the final destination or facilitate credential harvesting. The domain is flagged by one security blocklist and has a Gridinsoft trust score of 0/100, further supporting its malicious designation. While VirusTotal shows minimal detection (1/94 vendors), this does not diminish the threat, as phishing domains often evade initial scans. Defenders should treat this domain as hostile infrastructure. Recommended actions include blocking the domain and IP at perimeter controls, monitoring for related subdomains or redirects, and alerting users to the specific brand impersonation risk. The exact phishing kit or backend infrastructure remains unconfirmed, but the use of Cloudflare suggests attempts to mask origin servers. No legitimate association with Crypto.com exists.