blockchain[.]com[.]cmtoba[.]cc

The domain blockchain.com.cmtoba.cc was registered on February 21, 2026 and is currently active. Infrastructure analysis shows it resolves to IP address 95.129.233.226, which is owned by DDOS-GUARD LTD (AS57724) and geolocated in Russia. The domain uses the ns1.reg.ru and ns2.reg.ru nameservers and was registered through Key-Systems GmbH. A DDOS-Guard SSL certificate is present, but the site returns an HTTP 503 status code, indicating the service is unavailable or intentionally hidden. The Gridinsoft trust score is 0 out of 100, and the domain is listed on one security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that 7 of 95 security vendors flagged it as malicious. The page title matches the domain name, and the domain is classified as a crypto scam that impersonates the legitimate brand Blockchain.com. While the exact content of the site has not been examined, the combination of a low trust score, multiple vendor detections, and registration patterns typical of malicious infrastructure suggest a high‑risk threat. Defenders should add the domain and its resolving IP to blocklists, monitor DNS queries for the associated nameservers, and treat any traffic to this address as potentially harmful. Continuous observation is recommended to detect any changes in HTTP response or additional malicious activity.