tcwq6pz[.]com

This domain, tcwq6pz.com, operates as a cryptocurrency credential harvesting site designed to deceive users into disclosing wallet login details or private keys. The site employs social engineering tactics to mimic legitimate cryptocurrency platforms, tricking visitors into entering sensitive information that can be exploited for unauthorized access to digital assets. Analysis indicates the site specifically targets users of blockchain-based services, with infrastructure optimized for rapid deployment and evasion of detection mechanisms. Infrastructure analysis reveals the domain was registered on March 05, 2026, through Namemart Limited, a registrar frequently associated with high-risk domains. The site resolves to the IP address 188.114.97.3 and is flagged by 12 out of 95 security vendors on VirusTotal, including detections for social engineering. Additionally, the domain appears on four independent security blocklists, further corroborating its malicious classification. Technologies detected include Cloudflare for content delivery and HTTP/3 for enhanced performance, which may also aid in obfuscating the site's true origin. Users who visited tcwq6pz.com should immediately cease all interaction with the site and revoke any permissions granted to it. If credentials or private keys were entered, affected wallets must be transferred to new, secure addresses to prevent unauthorized transactions. Monitor all linked accounts for suspicious activity and enable multi-factor authentication where available. Given the domain's high-risk status and offline transition, users are advised to remain vigilant for similar threats, as operators may deploy new domains using comparable tactics.