blockresolver[.]online

The domain blockresolver.online has been identified as a crypto drainer phishing site, designed to compromise digital asset wallets and siphon cryptocurrency. Analysis indicates the domain is currently offline, though prior activity suggests it targeted users through deceptive wallet connection prompts or fake decentralized application interfaces. No specific brand impersonation has been confirmed, but the infrastructure aligns with known crypto-theft campaigns. Infrastructure analysis reveals the domain was registered on November 28, 2025, through Spaceship, Inc., a registrar frequently associated with high-risk domains. It resolves to the IP address 140.99.164.68, which has been linked to other malicious activities in recent threat intelligence reports. Detection metrics show the domain is flagged by 3 of 95 security vendors on VirusTotal and appears on 5 distinct security blocklists, including Codeesura, Polkadot, ScamSniffer, PhishDestroy, and Enkrypt. The Gridinsoft trust score for this domain is 0 out of 100, further corroborating its malicious classification. At present, blockresolver.online is offline, though domains of this nature often resurface under altered infrastructure. Users are advised to verify wallet connections exclusively through official platforms and to employ browser-based security extensions that block known phishing domains. Network administrators should update firewall rules to deny traffic to 140.99.164.68 and monitor for any re-registration attempts under similar naming conventions. Cryptocurrency holders should review wallet permissions and revoke access to any unfamiliar or suspicious applications.