# PhishDestroy domain threat record: e-chain.top

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/e-chain.top/
Machine-readable companion: https://phishdestroy.io/domain/e-chain.top/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:20:25 UTC
- Last availability or vendor check: 2026-10-26 16:40:48 UTC
- Stored record updated: 2026-10-26 19:30:32 UTC
- VirusTotal detections in the stored snapshot: 4/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Gname.com Pte. Ltd.
- Registrar country in stored WHOIS data: KH
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-09-27 10:43:43 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17914-5344-7353-878a-ca87d25f4150/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/e-chain.top
- Certificate Transparency search: https://crt.sh/?q=%25.e-chain.top
- Web Archive lookup: https://web.archive.org/web/*/https://e-chain.top/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot dated 2026-10-26 shows an entirely blank white page with no text, images, form fields, buttons or branding, and no offer, prompt or sign-in interface was observable. Page metadata at capture carried the title and description Csvpwecs. PhishDestroy first saw the domain on 2026-10-26, after automated intake reacted to VirusTotal domain detection on a domain registered 29 days earlier.

How the scam works
Pages in this category can act as staged phishing landings, serving credential or wallet-capture content selectively or after an initial visit while presenting a harmless surface to crawlers. That pattern would let an operator harvest login details or other sensitive input once lure content is delivered. No form, offer or impersonated brand was visible in this capture, so no harvesting or wallet interaction is confirmed for e-chain.top.

Evidence
The screenshot itself shows only a blank white page with no observable interface, offer or branding. VirusTotal flagged the domain as malicious, with LevelBlue labelling it phishing, from an analysis dated 2026-10-23 retrieved 2026-10-26. URLScan returned a clean verdict on 2026-10-26, Google Safe Browsing was not flagged on 2026-10-26, and 0 external blocklists plus 0 of 12 DNS resolvers listed it on 2026-10-26, while PhishDestroy's internal blocklist flagged it and OTX recorded 1 pulse on 2026-10-26. Cloudflare Radar classified the scan as phishing on 2026-10-26, the request returned HTTP 200 through a single-step redirect chain, and 16 tracker requests were recorded.

Infrastructure
Notable weaknesses in the 2026-10-26 inspection: Content-Security-Policy, HSTS/strict-transport, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP and CORP headers were all absent, DNSSEC was unsigned, and email authentication was weak, with SPF lookups recorded as 0 and no DKIM or DMARC configuration recorded. CAA records were present for the domain. Connections used TLS 1.3 with cipher TLS_AES_256_GCM_SHA384, forward secrecy and ALPN h2. The domain was registered through Gname.com Pte. Ltd. on 2026-09-27 and fronted by Cloudflare, whose WAF was detected.

What to do
If you submitted credentials or other sensitive data on e-chain.top, change that password on the genuine service immediately and enable two-factor authentication, and treat any follow-up messages as suspicious. Defenders should block the exact domain e-chain.top at the proxy, DNS and mail layers, and hunt for related lures using the recorded page metadata. Because several checks were negative on 2026-10-26, a clean result from any single source should not be treated as safety.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17914-5344-7353-878a-ca87d25f4150/
Cloudflare Radar report: https://radar.cloudflare.com/scan/54fee7dc-f92a-460c-9767-7c153d90e3ce
URLQuery report: https://urlquery.net/report/77cf685a-cb46-4259-bf8e-7a04cd6a5fdc
Stored capture screenshot: https://i.ibb.co/Xf9XN2YM/8bfee1112de1.png
Cloudflare Radar screenshot (2026-10-26T16:30:06Z): https://screenshots.phishdestroy.io/cf/54fee7dc-f92a-460c-9767-7c153d90e3ce.png
URLScan screenshot (2026-10-23T16:21:20Z): https://screenshots.phishdestroy.io/us/01a16990-da57-77ca-a9d3-5198d642507f.png
URLScan capture report: https://urlscan.io/result/01a16990-da57-77ca-a9d3-5198d642507f/
URLScan screenshot (2026-10-23T16:41:41Z): https://screenshots.phishdestroy.io/us/01a169a3-97d1-753c-81a2-7a1d8143317e.png
URLScan capture report: https://urlscan.io/result/01a169a3-97d1-753c-81a2-7a1d8143317e/
URLScan screenshot (2026-10-23T19:11:11Z): https://screenshots.phishdestroy.io/us/01a16a2c-82b2-743f-955e-fc6f66f77ea4.png
URLScan capture report: https://urlscan.io/result/01a16a2c-82b2-743f-955e-fc6f66f77ea4/
VirusTotal report: https://www.virustotal.com/gui/domain/e-chain.top
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=e-chain.top
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 18:09:39 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Xf9XN2YM/8bfee1112de1.png
  Captured: 2026-10-26 16:40:48 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17914-5344-7353-878a-ca87d25f4150.png
  Captured: 2026-10-26 16:40:48 UTC
  Source report: https://urlscan.io/result/01a17914-5344-7353-878a-ca87d25f4150/
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16d1f-8bb0-71f8-b355-0df7df025dcd.png
  Captured: 2026-10-24 08:55:55 UTC
  Source report: https://urlscan.io/result/01a16d1f-8bb0-71f8-b355-0df7df025dcd/
  SHA-256: 31308e0f63e8ac82f4d42604bab295245accfafa98e2d4430196a98ec50258e3
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16990-da57-77ca-a9d3-5198d642507f.png
  Captured: 2026-10-23 16:21:20 UTC
  Source report: https://urlscan.io/result/01a16990-da57-77ca-a9d3-5198d642507f/
  SHA-256: 31308e0f63e8ac82f4d42604bab295245accfafa98e2d4430196a98ec50258e3
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a169a3-97d1-753c-81a2-7a1d8143317e.png
  Captured: 2026-10-23 16:41:41 UTC
  Source report: https://urlscan.io/result/01a169a3-97d1-753c-81a2-7a1d8143317e/
  SHA-256: 31308e0f63e8ac82f4d42604bab295245accfafa98e2d4430196a98ec50258e3
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16a2c-82b2-743f-955e-fc6f66f77ea4.png
  Captured: 2026-10-23 19:11:11 UTC
  Source report: https://urlscan.io/result/01a16a2c-82b2-743f-955e-fc6f66f77ea4/
  SHA-256: 31308e0f63e8ac82f4d42604bab295245accfafa98e2d4430196a98ec50258e3
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/54fee7dc-f92a-460c-9767-7c153d90e3ce.png
  Captured: 2026-10-26 16:30:06 UTC
  Source report: https://radar.cloudflare.com/scan/54fee7dc-f92a-460c-9767-7c153d90e3ce
  SHA-256: e474a175f992442a69e502e42d7748076f7b37bd4715cf7c03ed2b7ff55231c3
- URLQuery: https://screenshots.phishdestroy.io/uq/77cf685a-cb46-4259-bf8e-7a04cd6a5fdc.png
  Source report: https://urlquery.net/report/77cf685a-cb46-4259-bf8e-7a04cd6a5fdc
  SHA-256: 039b0a7946836176c2d08c0d3c8f2fe6d59c6401a238a41089a11bcf11193c6c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T18:11:41Z",
        "uuid": "01a17914-5344-7353-878a-ca87d25f4150",
        "scanned_at": "2026-10-26T16:40:38Z",
        "final_url": "https://e-chain.top/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://e-chain.top/",
                "from": "http://e-chain.top/",
                "status": 307
            },
            {
                "to": "http://e-chain.top/",
                "from": "https://e-chain.top/",
                "status": 307
            },
            {
                "to": "https://e-chain.top/",
                "from": "http://e-chain.top/",
                "status": 307
            }
        ],
        "ip": "188.114.97.3",
        "ips": [
            "188.114.97.3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "2c518557c359951ece02a197fcb41d6dbf4f93d10601fe17cba712a371e968ad",
        "script_hashes": [
            "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151",
            "517967fc937185017fc5e95bb3a7a64b79cfeb54a2a0d863838544484193d0a7",
            "fcedb95ecec99dc0c386f9f2e87b0eb47b73e52dbba39c2607fe27168b7f6bc3",
            "7d4f4be3f101d1e21ba4cd1a6461fb8749abe0451bef742c484f8e3b1b71815a"
        ],
        "globals": [
            "TradingView",
            "addLink",
            "addMeta",
            "lib",
            "rem",
            "dpr",
            "__VUE_INSTANCE_SETTERS__",
            "__VUE_SSR_SETTERS__",
            "__INTLIFY_PROD_DEVTOOLS__",
            "__INTLIFY_JIT_COMPILATION__",
            "__INTLIFY_DROP_MESSAGE_COMPILER__",
            "__VUE_I18N_FULL_INSTALL__",
            "__VUE_I18N_LEGACY_API__",
            "setImmediate",
            "clearImmediate",
            "PubSub",
            "__config",
            "__theme",
            "__VUE__",
            "__vite_is_modern_browser"
        ],
        "storage_keys": [
            "us_THEME",
            "main",
            "us_LANGUAGE"
        ],
        "tls": {
            "san": [
                "*.e-chain.top",
                "e-chain.top"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "e-chain.top",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-26T12:01:31Z",
            "valid_from": "2026-09-27T12:01:32Z"
        },
        "domain_age_days": 29,
        "apex_age_days": 29,
        "tls_age_days": 29,
        "tls_valid_days": 89,
        "requests": 21,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 91,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T16:33:14Z",
        "uuid": "54fee7dc-f92a-460c-9767-7c153d90e3ce",
        "scanned_at": "2026-10-26T16:30:06Z",
        "final_url": "https://e-chain.top/",
        "status": 200,
        "history": [
            {
                "url": "https://e-chain.top/",
                "status": 200
            }
        ],
        "dom_hash": "02aa23913af900979125ffd9af6a217edc62c322b4e03a446d7adead180e0915",
        "doc_hash": "5c983afbec7e018913a9ff37b058f1a2b84d7f078fa38e3078392f5846daea89",
        "phishing_v2": [
            "phishing"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "e-chain.top",
                "type": "A",
                "value": "104.21.73.103"
            },
            {
                "name": "e-chain.top",
                "type": "A",
                "value": "172.67.189.165"
            },
            {
                "name": "e-chain.top",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:4967"
            },
            {
                "name": "e-chain.top",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:bda5"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.73.103",
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2026-09-27T12:43:43Z",
            "updated": "2026-09-27T12:53:19Z",
            "expires": "2027-09-27T12:43:43Z",
            "nameservers": [
                "john.ns.cloudflare.com.",
                "linda.ns.cloudflare.com."
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T16:28:03Z",
        "analysis_at": "2026-10-23T19:14:00Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 1,
            "suspicious": 3,
            "undetected": 34
        },
        "detections": {
            "Ermes": "not recommended",
            "SOCRadar": "suspicious",
            "LevelBlue": "phishing",
            "Forcepoint ThreatSeeker": "spam"
        },
        "reputation": 0,
        "registrar": "Gname.com Pte. Ltd.",
        "created": "2026-09-27T12:43:43Z",
        "expires": "2027-09-27T12:43:43Z",
        "updated": "2026-09-27T12:53:19Z",
        "first_seen": "2026-09-27T20:41:15Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "john.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "linda.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.189.165"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "john.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.73.103"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:bda5"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:4967"
            }
        ],
        "dns_at": "2026-10-23T19:19:31Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.e-chain.top",
                "e-chain.top"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "5b73eff1a1d7cec0b3c281d773c6404c539",
            "sha256": "9b7ded2e666ef4306886529c82f3f7f11b32bdf5a88981a712e2a8042f3fa9a1",
            "subject": "e-chain.top",
            "valid_to": "2026-12-26T12:01:31Z",
            "valid_from": "2026-09-27T12:01:32Z"
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "registrar_iana_id": "1923",
            "registrar_url": "http://www.gname.com",
            "created": "2026-09-27T12:43:43Z",
            "updated": "2026-09-27T12:53:19Z",
            "expires": "2027-09-27T12:43:43Z",
            "status": [
                "addPeriod",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "john.ns.cloudflare.com",
                "linda.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-27T12:43:43Z",
                "registration": "2026-09-27T12:43:43Z",
                "last update of RDAP database": "2026-10-18T12:53:21Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:35:36Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "e-chain.top"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:32:16Z",
            "first": "2026-09-27T14:33:03Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0.03,
            "avg_page_bytes": 3260
        },
        "social_tags": {
            "title": "Csvpwecs",
            "robots": "all",
            "ogImage": "/platform/us/logo_144.png?2.0.1791569477703",
            "ogTitle": "Csvpwecs",
            "keywords": "Csvpwecs",
            "themeColor": "#ffffff",
            "description": "Csvpwecs",
            "ogDescription": "Csvpwecs"
        },
        "trackers": {
            "requests": 16
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 44,
                "wait": 515,
                "connect": 12,
                "download": 0
            },
            "response_ms": 572
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 6378,
            "co2_grams": 0.0002,
            "cleaner_than": 81
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.32.250",
                    "host": "linda.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.59.185",
                    "host": "john.ns.cloudflare.com"
                }
            ],
            "zone": "e-chain.top"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "e-chain.top"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "john.ns.cloudflare.com",
                "linda.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"john.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417780429, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://e-chain.top"
            ]
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2026-09-27T12:43:43Z",
            "updated": "2026-09-27T12:53:19Z",
            "expires": "2027-09-27T12:43:43Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "john.ns.cloudflare.com",
                "linda.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```