bloxxxchain[.]com

Analysis of bloxxxchain.com, reported on July 12, 2026, confirms it is an active brand impersonation phishing site targeting the brand 'across', as indicated by its threat classification. The domain was created on June 11, 2025, through registrar Dynadot LLC, and currently resolves to IP address 104.21.90.99, hosted in the United States under AS13335 (Cloudflare, Inc.). The page title retrieved is 'Bloxxxchain - Automate Your Crypto Trading Experience', and the HTTP status is 200, confirming the site is live and serving content. Security intelligence shows 1 of 95 security vendors on VirusTotal flag the domain as malicious, and it appears on two security blocklists, including PhishDestroy and BLP-Malware. Additionally, AlienVault OTX records indicate the domain is present in 22 threat intelligence pulses, reflecting broad recognition by the security community. Trustworthiness scores are low, with Scamadviser rating it 26 out of 100 and Gridinsoft rating it 24 out of 100, further supporting its malicious nature. Infrastructure details reveal nameservers adrian.ns.cloudflare.com and tony.ns.cloudflare.com, consistent with Cloudflare hosting. No SSL certificate was detected, which is common for phishing sites. The exact content of the landing page beyond its title has not been captured in this analysis, but the combination of low trust scores, blocklist inclusion, and brand impersonation classification strongly indicates this domain is operated with malicious intent. Defenders should block access to bloxxxchain.com at network and email gateways, monitor for related domains registered through Dynadot LLC or using similar Cloudflare infrastructure, and update threat intelligence feeds with the indicators provided, including the IP address and nameservers. Users who have encountered this site should be warned not to enter any credentials or personal data, and any submitted information should be considered compromised.