blockchainfirm[.]io

PhishDestroy identifies www.blockchainfirm.io as an active credential-harvesting domain using a spoofed Blockchain Development Company identity. The site lures victims by copying branding from a legitimate UAE/India blockchain development firm named Delayer Labs.

This domain was flagged due to its role in generic phishing, specifically targeting users seeking blockchain development services. Intelligence indicates it resolves to 13.37.33.98 and uses a Let's Encrypt SSL certificate to appear legitimate. Registered through Namecheap Inc on May 26, 2018, it has not yet been blocklisted and shows 1/95 VirusTotal detections, with no current entries in common threat feeds like PhishTank or OpenPhish. Trust scores from threat intelligence platforms remain unverified due to its new or undetected status.

Users encountering this domain should avoid entering any credentials, personal data, or financial information. Block the IP 13.37.33.98 at the firewall or proxy level, and flag the domain via internal security tools or threat-sharing platforms. Educate teams to verify company websites directly through official channels before interacting. Given the absence of detections, early containment remains critical to prevent downstream compromise.