iscans[.]fund

Analysis of iscans.fund shows a recent registration on March 23, 2026 through NameCheap, Inc., using the registrar‑provided nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The domain resolves to IP address 170.75.164.161, which is hosted by Lunanode Hosting Inc. in Canada. No SSL certificate is presented for the host, indicating that any web service would be delivered over unencrypted HTTP. MX records are configured with a single entry pointing to eforward2.registrar-servers.com at priority 10, suggesting minimal email infrastructure.

VirusTotal reports that six of ninety‑four security vendors have flagged the domain, indicating a modest but notable detection rate across the scanning community. The Gridinsoft trust score is 0 out of 100, the lowest possible rating, and the domain is listed on a single security blocklist. It is also explicitly blocked by the PhishDestroy mitigation service. Current monitoring shows the domain is taken offline, but the historical evidence points to a generic phishing operation.

Defenders should continue to block traffic to iscans.fund at the network perimeter, add the domain to internal blacklists, and monitor for any re‑activation attempts. Given the lack of TLS, the low trust score, and multiple vendor detections, the domain should be treated as high risk until proven otherwise. Further investigation would be required to confirm the exact phishing payload or target, but the available infrastructure indicators already warrant preventive controls.