blockledger.top is assessed as a high-risk domain based on infrastructure analysis and threat intelligence that directly associates it with crypto drainer activity. The domain was registered on July 18, 2026, using NameSilo, LLC, and is currently active. It is configured with DNS services provided by dnsowl.com and resolves to IP address 107.22.93.187. This domain has been proactively blocked by PhishDestroy and is listed on at least one security blocklist, indicating that security vendors have identified and escalated the threat associated with it.
VirusTotal reports that 2 out of 91 security vendors have flagged blockledger.top, providing further support for the risk classification. However, not all major threat intelligence feeds or reputation sources may have detected it yet, so its prevalence across vendors is still limited. The specific contents of the site have not been directly analyzed, and there is no evidence regarding the exact appearance or tactics used on the active web page at this time. Given its rapid emergence, blocklisting, and the explicit link to crypto-drainer activity, defenders are advised to treat all interactions with blockledger.top as highly suspicious.
Immediate blocking at the network and endpoint level is recommended, along with ongoing monitoring for any related indicators of compromise. Users should not visit or interact with this domain under any circumstances. Further investigation into associated infrastructure and any possible phishing campaigns is warranted, as the domain remains active and capable of facilitating malicious operations.