The Multi-Chain Block Explorer Directory
Browse chains, block explorers, and providers. Every host TLS + post-quantum probed, chain coverage rolled up per provider, served as open data.
Networks tracked4,9363,550 mainnets · 1,386 testnets
Block explorers5,379every host continuously TLS + PQ probed
Explorer providers2114Etherscan, Blockscout, Routescan, Mintscan, …PQ-protected explorer hosts2,765pure ML-KEM-1024 or hybrid ML-KEM (last 24h)PQ adoption · last 24h · livefull tracker →
Pure PQ 0 (0.0%)Hybrid 2765 (69.9%)Classical 1192 (30.1%)
Live ranking of the 10 mainnets with the most block explorer hosts in the catalogue right now. Updates every time the upstream catalogue does. ExplorerScan tracks 4,936 networks and every block explorer that serves them, grouped by provider (Etherscan, Blockscout, Routescan, Mintscan, ping.pub, Solscan, …).
#NetworkIDTypeVMCurrencyExplorers
1
Why TLS & post-quantum posture matters for block explorers
(a fast classical explorer can still leak wallet lookups and forge tx pages)Explorers are a massive attack surface
Wallets, contract-verification tooling, tax software, and forensic dashboards deep-link into explorer URLs constantly. A compromised or spoofed explorer host can serve fake transactions, fake balances, fake contract source, or ship a phishing "connect wallet" banner directly into the receipt view. ExplorerScan continuously probes every host so you don't have to take the operator's word for their TLS posture.
Harvest now, decrypt later
Every address lookup, every internal-tx page, every "view on explorer" click is HTTPS traffic tied to a wallet. Classical key exchange (X25519, P-256, P-384) is recordable today and decryptable later by a sufficiently large quantum computer. Passive recording of explorer traffic maps addresses to viewers years down the line. PQ-hybrid (X25519MLKEM768) and pure ML-KEM survive that future attacker. Live adoption tracker →
TLS hygiene = operational maturity
The same operators who get TLS right (TLS 1.3, ECDSA, OCSP, SCTs, PQ hybrid) tend to run better indexers, faster refresh, and cleaner data pipelines. An explorer still serving an RSA-PKCS1 cert with no SCTs is usually behind on more than just crypto. The composite score is a proxy for whether the team is paying attention.
See the leaderboard →
See the leaderboard →
Real incidents, not theory
Etherscan phishing-ad campaigns (2022 to 2024, several $ losses). Registrar takeovers of popular chain explorers redirecting "connect wallet" flows. BGP hijacks pointing regional users at attacker-controlled clones. Each one is a documented post-mortem, not a hypothetical. Full case file →
How to read the scores. A fast endpoint isn't automatically a safe one. The composite TLS score blends key-exchange PQ class, cipher, leaf-cert key + signature alg, chain validity, TLS version, and ALPN, then subtracts up to 20 points for misconfigurations (no OCSP, no SCTs, expiring certs, broken chain). An A means hybrid PQ + ECDSA + clean cert hygiene; an F usually means classical key exchange and an RSA-PKCS1 cert, neither of which provides forward secrecy against a future quantum attacker. Open any explorer’s page for a per-component breakdown and a list of recommended fixes.
Live ranking of the providers that serve the most chains right now, with sibling brands (Etherscan → PolygonScan → BscScan …) rolled up under their parent. Chain count includes the parent brand plus every aliased sibling.