cysicfoundation[.]name

The domain cysicfoundation.name is a generic phishing domain that poses a specific threat as an NFT scam. It is designed to trick users into revealing sensitive information or connecting their cryptocurrency wallets, potentially leading to asset theft. The site has been taken offline, but it remains a risk due to its previous activity. No specific brand or drainer kit was identified, but the domain was flagged for phishing activity.

Technical indicators for cysicfoundation.name include detection by 2 of 95 VirusTotal vendors, including Gridinsoft and SOCRadar. The domain is registered through Cloudflare, Inc. and resolves to IP address 104.21.76.180, which is located in the US and associated with AS13335 Cloudflare, Inc. It appears on 1 security blocklist, specifically PhishDestroy, and its SSL certificate is issued by Google Trust Services / WE1. The page title observed was 'Nur einen Moment…' and the site used technologies such as Cloudflare and HTTP/3. Nameservers are leo.ns.cloudflare.com and phoenix.ns.cloudflare.com. Google Safe Browsing did not flag the domain.

To stay safe, users who interacted with cysicfoundation.name should immediately revoke any token approvals granted to the site and move funds to a new wallet. Change passwords for any accounts used on the site, enable two-factor authentication, and monitor for fraudulent activity. Report the domain to security blocklists like PhishDestroy and to relevant authorities to prevent further harm.