sxcas[.]com

Analysis of sxcas.com, observed as offline at the time of reporting (July 24, 2026), indicates a deliberate brand impersonation campaign targeting the Blast brand. The domain was registered on May 21, 2025 through Web Commerce Communications Limited operating as WebNic.cc. DNS resolution points to the IPv4 address 57.129.97.29, which belongs to AS16276, an OVH SAS network located in Germany. The hosting infrastructure therefore resides within the EU jurisdiction, but the use of a commercial hosting provider is consistent with typical abuse patterns. The site presented the page title "SXCAS | Enter the world of sport and stakes!" which does not directly reference the victim brand, yet the intelligence tags the domain as impersonating Blast.

No additional page content has been captured, so the exact method of deception remains unclear. The SSL certificate associated with the domain is graded E5, reflecting a low trust level. Independent reputation scoring, such as the Gridinsoft trust score, assigns a value of 0 out of 100, indicating a lack of legitimacy. VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain, confirming that at least a minority of security products recognize malicious behavior. The domain appears on a single external blocklist and is listed as blocked by the PhishDestroy service, further corroborating its classification as a phishing or scam resource.

However, the limited number of detections suggests that broader detection coverage may be lacking. Given the current evidence, defenders should treat sxcas.com as a high‑confidence malicious indicator. Defensive actions include adding the domain and its resolved IP address to outbound and inbound deny lists, updating URL filtering policies, and monitoring for any future re‑registration attempts. Analysts should also watch for related domains registered by the same registrar or hosted on the same OVH AS, as threat actors often reuse infrastructure.