m[.]blockchainusdcsx[.]com

This domain, m.blockchainusdcsx.com, poses a significant threat as a brand impersonation phishing site targeting users of Blockchain.com, a prominent cryptocurrency wallet service. The site is designed to deceive visitors into believing they are interacting with a legitimate Blockchain.com interface, likely prompting them to enter sensitive credentials such as wallet recovery phrases, private keys, or login details. Once obtained, these credentials can be used by attackers to gain unauthorized access to victims' cryptocurrency wallets, leading to the theft of digital assets. The page title, 'Blockchain transactions,' further reinforces the illusion of legitimacy, making it particularly dangerous for users who may not scrutinize the domain closely. Analysis indicates that m.blockchainusdcsx.com was registered on October 28, 2025, through the registrar Gname.com Pte. Ltd. The domain resolves to the IP address 198.18.3.75, which is associated with Cloudflare, Inc. (AS13335), a common hosting provider for both legitimate and malicious sites. Security vendors have flagged this domain as malicious, with 13 out of 95 engines on VirusTotal detecting it as phishing or brand impersonation. Additionally, the domain appears on one security blocklist and is explicitly flagged by Google Safe Browsing as a phishing site. The SSL certificate, issued by Google Trust Services (WE1), is valid, which may further mislead users into trusting the site despite its malicious intent. If a user has visited m.blockchainusdcsx.com or entered any sensitive information on the site, immediate action is required to mitigate potential damage. First, disconnect the device from the internet to prevent any ongoing data exfiltration. Next, change the passwords and recovery phrases for all cryptocurrency wallets and associated accounts, using a separate, secure device. Enable multi-factor authentication where possible to add an additional layer of security. Monitor wallet transactions closely for any unauthorized activity and consider transferring assets to a new wallet if there is evidence of compromise. Finally, report the incident to relevant authorities or cybersecurity organizations to help prevent further victimization. Users should also scan their devices for malware, as phishing sites may distribute additional malicious payloads.