iscans[.]trading
“iScans - Multi-Chain Portfolio Tracker”
The domain iscans.trading was a generic phishing site posing as a fake cryptocurrency exchange labeled 'iScans - Multi-Chain Portfolio Tracker'. It did not impersonate a specific brand but operated as a scam designed to steal user credentials and funds. As of the latest verification, iscans.trading has been taken offline, though it previously exhibited elevated risk due to its fraudulent activity.
Technical indicators confirm the domain's malicious nature. iscans.trading was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, and appeared on 1 security blocklist (PhishDestroy). Registered through NameCheap, Inc. on March 13, 2026, the domain resolved to IP address 170.75.164.161, hosted by Cogent Communications in California. The site used an SSL certificate issued by Let's Encrypt and employed technologies such as Nginx and HSTS. Nameservers were dns1.registrar-servers.com and dns2.registrar-servers.com.
Users who interacted with iscans.trading should immediately change any credentials entered on the site and enable two-factor authentication on all financial and cryptocurrency accounts. If cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new wallet. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities to assist in preventing further fraud.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of iscans.trading · checked Mar 16, 2026
Evidence & External Reports
PD-20260316-6DDF28 Recipient: abuse@namecheap.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive