blockresolve[.]io

The domain blockresolve.io is identified as a credential theft phishing site and is currently offline. There is no evidence of it being a crypto drainer or brand impersonation. Analysis indicates that the domain has been flagged by 1 of 95 security vendors on VirusTotal, suggesting potential malicious intent. The domain is registered through Tucows Domains Inc. and resolves to the IP address 64.29.17.1. It was created on September 4, 2025, and appears on 4 security blocklists, including Polkadot, Codeesura, PhishDestroy, and Enkrypt. The Scamadviser trust score for blockresolve.io is 21/100, and the Gridinsoft trust score is 0/100, both indicating a low level of trust and high risk.

Infrastructure analysis reveals that the domain uses an SSL certificate from Let's Encrypt, a common choice for legitimate and malicious sites alike. The low trust scores from Scamadviser and Gridinsoft, combined with the single flag from VirusTotal and presence on multiple security blocklists, provide strong indicators of the domain's involvement in phishing activities aimed at credential theft. The domain's recent creation date of September 4, 2025, further suggests it may have been set up specifically for a short-term malicious campaign.

Given the current offline status of blockresolve.io, users should exercise caution and avoid accessing the site until further notice. Organizations and individuals are advised to update their threat intelligence databases to include this domain and monitor any related IP addresses for potential malicious activity. Additionally, network administrators should consider blocking access to this domain to prevent any accidental exposure to credential theft attempts.