bloxlink[.]pk

The domain bloxlink.pk was registered on 17 May 2026 and is currently reachable over HTTPS with a Let’s Encrypt certificate issued under the E7 profile. The site returns HTTP 200 and presents a page titled “Bloxlink”. Its content and visual design mimic legitimate services, a pattern commonly associated with generic phishing campaigns that aim to harvest credentials.

Network analysis shows the domain resolves to the IPv4 address 91.240.20.16, which is hosted in the Netherlands and attributed to Hooray Solutions Corp. The web server identifies itself as Nginx. The IP appears on a single security blocklist and has been flagged by PhishDestroy. Gridinsoft assigns the host a trust score of 0 out of 100, indicating an extremely low reputation.

VirusTotal scans report that 2 of 95 antivirus engines flag the domain as malicious, suggesting that some detection signatures recognize it as a phishing vector while the majority do not. The limited detection footprint may reflect the domain’s recent creation date and the use of off‑the‑shelf phishing kits that evade many heuristics. No additional infrastructure such as command‑and‑control servers or malware payloads has been observed.

Defenders should block traffic to bloxlink.pk at the network perimeter and add the IP 91.240.20.16 to deny lists. Email gateways should be configured to treat any messages containing links to this domain as suspicious and quarantine them. Continuous monitoring of the host’s reputation and periodic re‑scanning with updated threat feeds are advised, as the domain’s activity may evolve rapidly.