blockchainventuresgroup[.]com
“Blockchain Ventures Group Limited”
Resumo das evidências
Analysis conducted on 24 July 2026 identifies blockchainventuresgroup.com as a newly observed crypto‑scam infrastructure that claims to represent Ethereum. The domain was registered on 24 August 2025 through NameCheap, Inc. and resolves to the IPv4 address 92.113.16.141, which is assigned to AS47583 Hostinger International Limited in Germany. The hosting provider is therefore a shared web‑hosting service commonly abused for malicious campaigns. The site was blocked by the PhishDestroy blocklist and currently appears on one additional security blocklist, indicating that at least one reputable sinkhole has taken action against the domain. The SSL certificate presented on the site is identified as “WR1”, but no further validation details are available.
The page title returned by the HTTP response is “Blockchain Ventures Group Limited”, which does not reference Ethereum and suggests an attempt to lend credibility through a corporate‑sounding name. VirusTotal analysis shows that a single out of ninety‑three security vendors flagged the domain, reflecting limited detection coverage at the time of scanning. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. The domain is listed as a “Crypto Scam” and is explicitly reported to impersonate Ethereum, confirming the intent to deceive users seeking legitimate Ethereum services. The current HTTP status is reported as offline, implying that the malicious content has been taken down or the hosting has been suspended.
However, the underlying infrastructure – the registered domain, hosting IP, and SSL certificate – remain active and could be re‑used in future campaigns. Defenders should continue to monitor the IP address 92.113.16.141 for any reappearance of phishing or malware activity, enforce blocklisting of the domain in corporate web filters, and consider proactive sinkholing of the associated host.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 11/08/2026
10 fontes externas monitoradas Sem correspondência
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Inteligência forense
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo