blockholdings[.]org

The domain blockholdings.org is a generic phishing site posing no direct impersonation of a known brand or use of a drainer kit. It presents itself as 'Block Holdings' but operates as a credential-harvesting page targeting visitors with fraudulent login prompts. As of the latest verification, blockholdings.org has been taken offline, though it remains a documented phishing threat.

Technical indicators confirm the elevated risk level of blockholdings.org. The domain was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) and was registered through NameSilo, LLC on February 21, 2026. The site resolved to IP address 107.172.61.186 (US, AS36352 HostPapa) and used an SSL certificate issued by ZeroSSL RSA Domain Secure Site CA. Technologies detected include Bootstrap, LiteSpeed, Slick, jQuery, and HTTP/3, with the observed page title 'Block Holdings - Welcome to Block Holdings'.

Individuals who interacted with blockholdings.org should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized access or fraudulent activity. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader takedown efforts. If financial or cryptocurrency details were exposed, contact relevant institutions to secure accounts and review transaction histories for suspicious activity.