web3-blocks[.]com

The domain web3-blocks.com was registered through Dynadot LLC on February 21, 2026. It resolves to the IP address 103.224.212.109, which is geolocated to Australia and is owned by Trellian Pty. Limited. The domain is served behind Cloudflare using HTTP/3, and the authoritative nameservers are alla.ns.cloudflare.com and milan.ns.cloudflare.com. The site returns an HTTP 200 response, while the page title currently shows “web3-blocks.com | 502: Bad gateway”.

Threat intelligence sources have classified the site as a generic cryptocurrency phishing operation. It appears on four independent security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The Gridinsoft trust score is 0 out of 100, and VirusTotal reports that one out of ninety‑five security vendors flagged the domain as malicious. The overall risk level is high and the status remains active.

Evidence beyond the infrastructure indicators is limited; the public page title does not reveal the specific content or any credential‑capture mechanisms. No additional malware kits, brand impersonation details, or payload indicators have been observed in the current dataset. Consequently, the exact phishing vector—such as a fake wallet login or a malicious transaction page—remains unknown, requiring further content analysis.

Defenders should treat web3-blocks.com as a high‑confidence malicious indicator. Blocking the domain at the DNS layer and denying outbound connections to 103.224.212.109 will prevent accidental user interaction. Continuous monitoring of DNS queries for the domain and its associated nameservers is advised, as well as inclusion in existing phishing and crypto‑scam blocklists. Incident response teams should also capture any attempted connections for deeper forensic examination.