Is blockeds.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a bare, near-empty web property at the blockeds.com domain. Its homepage returned a not-found response carrying only a few characters of text. It shows a visitor no products, services, branding, or stated business purpose, so its apparent function can't be determined from what it serves.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. A major browser-safety service currently flags the domain for social engineering, which is the category used for phishing and deceptive-content threats. Several independent security engines also rate it malicious, and one rates it suspicious. The domain is therefore blacklisted by multiple third-party sources, and that listing overrides the otherwise ordinary technical hygiene. Neither impersonation of a specific brand nor conflicting legal identities was observed. The risk comes from the active threat listings, not from anything the homepage says. The threat listing is not tied to any distributed malware file, so it points to a deceptive-content or phishing role. Because the page is almost empty, a landing page or redirect could be swapped in without notice. The domain's history compounds the concern. Archive records show a few early captures from years ago, while the current registration is only weeks old. That pattern fits a lapsed domain that was re-registered, and the archive carries a phishing-known marker. On the plus side, automated browsing sessions saw no outbound data submissions, no wallet-connection prompts, no clipboard manipulation, no hidden forms, and no cloaking. This shows only that the empty page does nothing suspicious when loaded. It does not offset the external listings. Evidence:

• Homepage: returned a not-found status with about 18 characters of text and no identifiable business content.
• Reputation checks: the browser-safety service flagged the domain as social engineering, 6 security engines rated it malicious, and 1 rated it suspicious.
• Domain history: registered 2026 (~34 days old). 4 archive snapshots span 2021–2026 (6 years tracked), with a long gap between them.
• Behavioral sessions: 3 of 3 runs completed with zero external requests, no wallet or clipboard activity, and no cloaking.

Regulatory Verification Notes

The site claims no regulated activity, licensing, or registration, and no legal, terms, or about pages were captured. There is therefore nothing to check against a licensing registry. No third-party broker or regulatory-database record was matched, and the absence of a match is neutral. The site's real-world operator has not been independently linked to any brand or person, so no claim of legitimacy can be made. The registration was made through Namecheap, a mainstream registrar, but registrar choice carries no weight against the active threat listings. The TLS certificate is a basic domain-validated one, which proves only control of the domain, not the operator's identity. Evidence:

• Homepage: no company name, licence, registration number, or legal pages were available to assess.
• Registration: registered through Namecheap on 2026-09-17, expiring 2027-09-17.
• Hosting and encryption: served from AS13335 (Cloudflare); TLS certificate issued by YE1 (DV), valid to 2026-12-16 (54 days remaining).

What to Verify Next

The domain should not be treated as a trusted destination while the external listings stand. Anyone who reached it through a link, message, or advertisement should trace where that link came from. They should then confirm the real destination through an independently sourced official channel, not through the site itself. If the domain is an organisation's own, the owner should check for compromise or a lapsed-and-reclaimed registration and request a review from the listing providers once the content is clean. Re-check the domain's status in the major threat feeds before any future engagement. Evidence:

• Reputation checks: the active browser-safety and multi-engine listings are the primary gating condition.
• Domain history: a recent registration following sparse older archive captures is the provenance question to resolve.
• Homepage: the empty page gives no on-site contact or identity route, so any official contact must come from an outside source.

Summary Verdict

The overall posture is high risk. Active, corroborated threat listings from independent sources outweigh the benign technical features, and the domain's recent re-registration and empty content give no basis to offset them. The assessment is cautionary, with the domain treated as unsafe for any sensitive interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the true origin could not be seen. The certificate is valid and issued by a recognised issuer. This is a mitigating factor only. Edge-only visibility means hosting cannot be independently confirmed and content could be swapped rapidly. A young domain with sparse subdomains is an unconfirmed heuristic and does not change the verdict.

Closing Assessment

Do not log in, enter credentials, or make any payment or financial interaction with this domain. Any contact should be limited to passive viewing from a protected environment, and no files should be downloaded from it.