scopescan[.]net

This domain, scopescan.net, is identified as a brand impersonation threat specifically targeting investors through fraudulent investment schemes. Analysis indicates the domain mimics legitimate Web3 analytics platforms, as evidenced by its page title, 'Scopescan - Web3 Analytics and Investigation Platform,' which aligns with known tactics used to lend credibility to scam operations. The threat type is classified as an investment scam, a common vector for luring victims into fake financial opportunities with promises of high returns. Infrastructure analysis reveals the following technical indicators: the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.27.87, a Cloudflare-associated address often used to obfuscate malicious infrastructure. The domain is flagged by 1 out of 95 security vendors on VirusTotal, and it appears on 6 distinct security blocklists, including those maintained by MetaMask, ScamSniffer, and SEAL. No Google Safe Browsing (GSB) detections were recorded at the time of assessment, though the domain's presence on multiple blocklists underscores its elevated risk profile. Currently, scopescan.net is offline, suggesting either takedown actions or voluntary cessation by the operators. However, the domain's infrastructure remains intact, and the risk of reactivation persists. Users are advised to treat any future appearances of this domain or similar variants as highly suspicious. Organizations should monitor for related indicators, such as the IP address and registrar details, to preemptively block access and mitigate potential exposure to this investment scam threat.