rectifywebnodechain[.]xyz

The domain rectifywebnodechain.xyz was registered on February 21, 2026 and is currently taken offline. Passive DNS resolution shows the name pointing to the IP address 104.21.80.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a generic page title, "Welcome to our website," and was identified as a crypto‑related scam in the intelligence feed. VirusTotal scans recorded five detections out of ninety‑three participating security vendors, indicating that multiple AV engines flagged the host as malicious.

Independent blocklist aggregators have listed the domain on five separate blocklists, and it is actively blocked by commercial phishing‑mitigation services including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The SSL certificate presented under the label WE1, but no further certificate details are available. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the assessment of high risk.

The combination of a low trust score, multi‑vendor detections, and inclusion on several blocklists suggests that the domain was used to lure victims into a cryptocurrency scam, although the exact payload or victim interaction flow remains unverified. Defenders should continue to block the domain at network perimeter devices, update URL filtering policies, and monitor for any resurgence of the host or related sub‑domains. Analysts should also query threat‑intel platforms for any newly observed indicators tied to the IP address or SSL fingerprint, and consider sharing the observed indicators with industry‑wide blocklist feeds to improve collective protection.