blockex[.]world

This domain, blockex.world, is assessed as a high-risk brand impersonation threat targeting PayPal. The domain is designed to deceive users into believing they are interacting with a legitimate PayPal service, potentially leading to credential theft or financial fraud.

Infrastructure analysis reveals that blockex.world is registered through Namecheap Inc and resolves to the IP address 188.114.97.3. The domain has been flagged by 22 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion among the security community. It appears on one security blocklist and has been identified by Google Safe Browsing as a phishing site. Notably, the domain lacks an SSL certificate, which is a common security feature for legitimate websites. The current status of the domain is offline, suggesting that it has been taken down or is no longer active.

To mitigate the risks associated with this brand impersonation threat, users should avoid clicking on any links or entering credentials on any page that appears to be from PayPal but is hosted on blockex.world. Organizations should update their threat intelligence feeds to include this domain and educate employees about the signs of brand impersonation attacks. Additionally, implementing multi-factor authentication (MFA) for PayPal accounts can provide an extra layer of security against credential theft. IT teams should monitor network traffic for any attempts to resolve or connect to this domain and block such connections to prevent potential data breaches.