Security Scan Report: refundportal-blockfi.com

Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 11 HTTP transactions. The main domain is refundportal-blockfi.com and was registered 11 months ago.

Submitted URL: https://refundportal-blockfi.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Non-official 'refundportal-blockfi.com' uses BlockFi's brand and carries a phishing report; the real page is hidden behind a bot challenge. Treat as brand-impersonation phishing — do not enter credentials, wallet details or payment data.

Risk Factors (5)
Domain name impersonates a different organisation's brand (BlockFi) on a non-official domain
Single-source threat-intel phishing report on the primary domain
Unranked / no domain reputation
Circular redirect signal
Content hidden behind a bot-protection challenge, preventing verification of what the portal actually does
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

The domain 'refundportal-blockfi.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'refundportal-blockfi' spans 20 characters with six vowels and 13 consonants, plus 1 hyphen. Breaking it apart gives four words: refund, portal, block, fi. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://refundportal-blockfi.com/

Page Load Overview

19.86s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:402 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.83.31Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.167.128Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
114--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T173133A7CD70071AB3F1B83EE59D4F99957354350A73166A6F8FA225C8BA3AD42C322C1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:5mvvwoD1Cd8GGIXp/wSNux2qrAI4O7tYd7ii:kD1Cd8GGIXp/wSNo2qxtYdui

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:44739:VSpA0h6AlAUBBUHXgAJBJA4gDkPtKAiIwYhAQoEQAbgEUQwkCAoFYC4yw6ZMYSM06opZABTnR71ygIVtQAkLMgpQOQG1yFgc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c3cbffffffffe7
Perceptual Hash:b03032cfc6cdcecc
Difference Hash:089e16100000000c
Wavelet Hash:fcc0ccfc3c3c3c00
Color Hash:#2d8630

Other Hashes

Crop Resistant:089e16100000000c

Scan History

Scan history not available

Unable to load historical scan data