Security Scan Report: refund-portal-blockfi.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is refund-portal-blockfi.com and was registered 11 months ago.

Submitted URL: https://refund-portal-blockfi.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

refund-portal-blockfi.com impersonates the BlockFi brand as a 'refund portal' on a non-official domain, carries a phishing report, and hides behind a bot wall. Avoid; do not enter personal or payment data.

Risk Factors (5)
Hostname impersonates the BlockFi brand ('refund-portal-blockfi') on a non-official domain
'Refund portal' lure naming a defunct crypto lender is a classic advance-fee/credential-harvesting pretext
Phishing classification reported in threat intelligence for the primary domain (single-source)
Circular redirect / bot-wall gating prevents verification of the real page
Unranked domain with no legitimate business footprint (legitimacy score 10/100)
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

Domain 'refund-portal-blockfi.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 21 characters in 'refund-portal-blockfi' split between six vowels and 13 consonants, notching 2 hyphens. Segmentation suggests four words: refund, portal, block, fi. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refund-portal-blockfi.com/

Page Load Overview

20.00s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:404 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
77%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F5131A759B023237363B464ECD86F5A9137ED200A529E39DB4B1538D8FC328A6563BC7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:OmV1e0DyjipYFPA5gfAneCD76dQg4FY+CS675AxlaKZGgoEsXeF3CghpIHJZCn9F:xxoyiQXY+CS675AxlaKZGgoEsXeF3CgJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:44743:QRYEQrIAEABkmk5AIFAIQgIgKBgCZAwO8RJIRRJCbqqBGADTYUYFwVrxJsAAbTMaGFwGOMKvAaYsCMBUAQAAyKCdhCCAAIC0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3cbffffffffe7
Perceptual Hash:b03032cfc6cdcecc
Difference Hash:089e12100000000c
Wavelet Hash:3f030f3f3c3c3c00
Color Hash:#7987d2

Other Hashes

Crop Resistant:089e12100000000c

Scan History

Scan history not available

Unable to load historical scan data