app-blosk[.]io

app-blosk.io was registered on March 24, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is served by Cloudflare DNS, using the authoritative nameservers johnny.ns.cloudflare.com and meadow.ns.cloudflare.com, and resolves to the IP address 188.114.97.3, which is part of Cloudflare’s edge network. VirusTotal records indicate that five of ninety‑one security vendors have flagged the domain, suggesting malicious activity, and the domain is currently listed on three public blocklists.

Additionally, it is blocked by the PhishDestroy, MetaMask, and SEAL filtering services, reinforcing its classification as a phishing vector. The threat is identified as generic phishing, but no further detail on the targeted brand, page title, or payload has been disclosed in the available intelligence. Consequently, the exact content and user‑facing behavior of the site remain unknown.

Defenders should treat the domain as hostile: add 188.114.97.3 and the domain name to network and DNS blocklists, monitor for any DNS resolutions or HTTP requests to the IP, and consider employing URL filtering solutions that incorporate the listed blocklists. Continuous observation of newly created domains from the same registrar and similar Cloudflare name server patterns is advised, as the rapid creation date and early blocklist listings indicate an active campaign. Until additional forensic evidence is collected, the precautionary stance should remain elevated.