bcsecexplorer[.]com

The domain bcsecexplorer.com was registered on February 12, 2025 through Hostinger Operations UAB and resolves to the IP address 145.223.89.119, which is assigned to AS47583 Hostinger International Limited in the United Kingdom. The site is currently offline, a status confirmed by multiple blocklists and the listed security vendors. An SSL certificate issued by ZeroSSL RSA Domain Secure Site CA was observed, indicating that the domain was capable of serving HTTPS traffic.

The page title returned by the server, "Blockchain Security Explorer," does not directly reference the targeted brand but the domain is explicitly flagged as impersonating Facebook, aligning with a social media phishing classification. VirusTotal scans recorded a single positive detection out of 93 security vendors, and the domain appears on five public blocklists. Additional threat intelligence providers—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—have already blocked the domain, and Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of malicious intent.

While the exact payload or credential harvesting mechanisms have not been disclosed, the convergence of an elevated risk rating, brand impersonation of Facebook, and the presence of a generic blockchain‑related title suggests a possible attempt to lure users with a technical veneer. Defenders should continue to block the IP and domain at perimeter controls, monitor for any re‑activation or similar infrastructure, and update detection signatures to include the observed SSL certificate attributes and the specific host‑header pattern. Ongoing observation of the AS47583 host range is recommended, as adversaries may reuse the same hosting environment for future campaigns targeting social media platforms.