blockchain-payments[.]com

This domain is flagged for impersonating Blockchain.com, a legitimate cryptocurrency wallet and exchange service. The site presents itself as a cryptocurrency trading and investment platform under the title 'TEST - Cryptocurrency trading and invest platform,' likely designed to deceive users into entering sensitive credentials, such as wallet private keys or login details. Such phishing sites often harvest this information to gain unauthorized access to victims' cryptocurrency holdings, leading to financial theft or further exploitation of compromised accounts. Analysis indicates the domain was registered on February 25, 2025, through Ultahost, Inc., and currently resolves to the IP address 172.67.133.186, hosted on Cloudflare's infrastructure (AS13335). It uses a ZeroSSL RSA Domain Secure Site CA certificate for encryption, which, while providing HTTPS, does not guarantee legitimacy. VirusTotal reports that 1 out of 95 security vendors has flagged this domain as malicious, and it appears on one security blocklist, further confirming its suspicious nature. If a user has visited blockchain-payments.com or entered any credentials on the site, immediate action is required. First, revoke any access granted to the site in connected wallet applications or exchange accounts. Next, change passwords for all associated cryptocurrency accounts and enable multi-factor authentication if not already active. Monitor transaction histories for unauthorized activity and consider transferring funds to a new, secure wallet if compromise is suspected. Report the incident to relevant security teams or platforms for further investigation and potential takedown efforts.