blockwizn[.]top

The domain blockwizn.top was registered on February 21, 2026. It currently resolves to the IP address 172.67.221.172, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site is listed as offline, and the blocklist provider PhishDestroy confirms that the domain has been taken down. During the brief period it was live, the page title returned was "web3 Deep," which aligns with the classified scam type of a cryptocurrency‑related fraud. VirusTotal analysis shows that ten of ninety‑five security vendors flagged the domain, indicating a measurable detection rate. The domain appears on one external security blocklist, and the Gridinsoft proprietary trust score is 0 out of 100, reinforcing the assessment of malicious intent. The SSL certificate is identified as "WE1," a label not associated with a recognized public‑trusted certificate authority, a characteristic often observed in illicit infrastructure.

PhishDestroy’s inclusion of the domain in its blocklist demonstrates that the site was actively used for malicious purposes before its removal. No additional data such as Safe Browsing verdicts, Open Threat Exchange references, or registrar information were supplied, limiting deeper attribution. However, the combination of a recent registration date, Cloudflare front‑end hosting, low trust score, and a crypto‑focused page title strongly suggests the domain was leveraged to lure victims into a fraudulent Web3 or cryptocurrency service, possibly to harvest credentials or direct users to illicit wallet addresses.

Defenders should ensure the domain is blocked at DNS and perimeter firewalls and continue to monitor the associated IP address for any re‑activation or new domains pointing to the same infrastructure. Any observed traffic to blockwizn.top should be treated as malicious, with affected hosts isolated for forensic analysis to detect potential credential theft or cryptocurrency address exposure.