MALICIOUS — CRITICAL
blockchain-scan[.]org
16 of 91 security engines flagged the domain; 2 public blocklists listed it (MetaMask, SEAL); the latest stored check returned HTTP 307.
- VirusTotal
- 16/91
- Blocklists
- 2 · MetaMask, SEAL
- उपलब्धता
- अंतिम ज्ञात सक्रिय · HTTP 307
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
blockchain-scan.org — अंतिम ज्ञात सक्रिय (HTTP 307). ब्रांड प्रतिरूपण: Bitcoin; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 16/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. रजिस्ट्रार: NameCheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Evidence Digest
blockchain-scan.org is classified critical with an evidence score of 100/100. 16 of 91 security engines flagged the domain; 2 public blocklists listed it (MetaMask, SEAL). Registered 21 Mar 2026 via NameCheap, Inc., hosted on 216.198.79.1 (Amazon.com, Inc., US). The latest stored check on 9 Aug 2026 returned HTTP 307 and includes a capture.
Stored generated summary (templated)mistral · 01/05/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
PhishDestroy’s anti-phishing unit has opened a forensic investigation into blockchain-scan.org, a recently activated domain masquerading as a blockchain explorer to harvest private wallet keys and seed phrases. The site’s lures reference generic cryptocurrency terms such as ‘scan’ and ‘blockchain,’ suggesting an attempt to impersonate legitimate blockchain explorers like Etherscan or Blockchain.com. No bespoke drainer kit hash or brand logo has been positively identified during initial crawling, but automated JavaScript payloads are under static analysis for obfuscated wallet-draining routines.
Technical indicators confirm the following footprint: VirusTotal detection score 0/95 (no AV flags), TLS certificate issued by Let’s Encrypt on IPv4 216.198.79.1, domain name registered through NameCheap, Inc. on March 21, 2026, and a total of zero blocklist inclusions at time of writing. Google Safe Browsing currently holds no verdict for the URL, leaving browsers and security products unaware of the threat. The combination of a fresh registration, low VT coverage, and absence from global blocklists lowers the immediate detection surface and elevates the operational risk.
The domain remains ACTIVE and under INVESTIGATION; PhishDestroy has escalated SHA-256 artifacts to CERT partners and added the IP to our real-time sinkhole feed. While risk posture is currently assessed as under_investigation, the low detection baseline and phrasing strongly indicate an imminent shift to high severity once drainer payloads are confirmed. Users are advised to block 216.198.79.1 at the network perimeter, avoid clicking any blockchain-scan.org links, and verify explorer URLs via official project channels before entering private keys.
डेटा कवरेज12 recorded checks
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 2 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of blockchain-scan.org · checked May 1, 2026
साक्ष्य और बाहरी रिपोर्टेंIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।