flowsdghel[.]blinkusercontent[.]com

The domain flowsdghel.blinkusercontent.com was registered on July 14 2026 through Cloudflare, Inc. and is currently hosted on the Cloudflare network, resolving to the IP address 172.67.129.201. The authoritative name servers etienne.ns.cloudflare.com and kara.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. VirusTotal analysis shows that a single security vendor among ninety‑one has flagged the domain, indicating limited detection coverage. The domain is listed on the PhishDestroy blocklist, representing one known security blocklist entry.

The threat classification is generic phishing with a high risk rating, and the operational status is recorded as active as of the report date, August 06 2026. Available intelligence does not include a published page title, SSL certificate details, or explicit brand targeting, therefore the precise content of the hosted page remains unverified. The limited detection signal, combined with the recent creation date and reliance on Cloudflare’s shared hosting, suggests a short‑lived infrastructure typical of opportunistic phishing campaigns.

Defenders should continue to monitor the domain for any changes in detection scores, add the IP address 172.67.129.201 to network‑level deny lists, and enforce blocklist updates that include PhishDestroy entries. In addition, security teams are advised to treat any inbound traffic to this domain as malicious, quarantine related emails, and employ URL‑reputation services that incorporate the latest threat‑intel feeds. Ongoing observation is recommended to capture potential payload delivery or credential‑harvesting activity should the actor expand the campaign.