# ciphermix.space — SUSPICIOUS

> Avoid ciphermix.space as it is linked to phishing attempts. The domain is currently offline but was flagged on security blocklists.

## Summary
PhishDestroy identifies ciphermix.space as a low-risk phishing domain. It was used for generic phishing activities targeting unsuspecting users.

The domain was registered via NameCheap, Inc. on March 06, 2026, and resolved to IP 216.198.79.193. It appeared on one security blocklist, and only one out of 95 VirusTotal vendors flagged it, indicating limited but present malicious activity.

Currently, ciphermix.space is offline, reducing immediate risk. Users should avoid interacting with this domain and maintain updated security measures to mitigate potential phishing threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Cipher - Advanced Privacy Protocol

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: NameCheap, Inc.
- Country: US
- IP: 216.198.79.193
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: ["dns1.registrar-servers.com", "dns2.registrar-servers.com"]
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc2d5-e726-748e-bdf3-b6a424ff1137.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ciphermix.space
- Wayback Machine: https://web.archive.org/web/https://ciphermix.space
- PhishDestroy: https://phishdestroy.io/domain/ciphermix.space/
- LLM endpoint: https://phishdestroy.io/domain/ciphermix.space/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ciphermix.space/
Last updated: 2026-03-19