wixi-exchanges[.]com

The domain wixi-exchanges.com was registered on February 21, 2026 through Web Commerce Communications Limited and is currently hosted on Cloudflare infrastructure (ASN 13335) with the IP address 188.114.96.3 located in the United States. DNS resolution points to the authoritative Cloudflare nameservers cody.ns.cloudflare.com and gigi.ns.cloudflare.com. No TLS certificate was observed, indicating the site was served over plain HTTP at the time of takedown. The page title retrieved from the live site reads "Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | WixiExchanges," which aligns with the declared scam type of a crypto scam and the targeted brand Ethereum.

The domain has been flagged by 15 of 93 security vendors on VirusTotal and appears on a single external security blocklist. It was also blocked by the PhishDestroy mitigation service. Independent reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The site is presently offline, and no further content was captured.

Evidence suggests the operator leveraged a legitimate‑looking cryptocurrency exchange narrative to lure victims interested in Ethereum trading. Defensive actions should include adding the domain and its resolving IP to organizational blocklists, monitoring for any future activity from the same IP range, and updating web filtering rules to detect the exact page title string. Analysts should also watch for new domains registered by the same registrar or using the same Cloudflare nameservers that exhibit similar branding or title patterns, as these may indicate a continued campaign.