blofinm2[.]com

Analysis of the domain blofinm2.com, observed on July 24, 2026, indicates that it is part of a generic phishing campaign and is currently taken offline. The domain was registered on February 21, 2026, and resolves to the IP address 182.16.39.164, which is assigned to Netsec Limited in Hong Kong under ASN 45753. The site presents the page title "Blofin," suggesting an attempt to impersonate a brand or service named Blofin, though no additional branding evidence is available. Secure Socket Layer (SSL) certificate data is recorded as "R11," and the domain has been flagged by a single security vendor on VirusTotal, where 1 of 93 scanners reported it as malicious.

Independent security tooling, such as Gridinsoft, assigns a trust score of 35 out of 100, reflecting a low confidence level. The domain is listed on one external blocklist and is actively blocked by the PhishDestroy mitigation service, confirming its classification as a phishing vector. While the HTTPS handshake completes, the low trust score and single vendor detection suggest limited but credible malicious intent.

Uncertainty remains regarding the specific phishing kit or payload used, as no page content analysis has been published. Defensive teams should continue to block the domain at network perimeter devices, update URL filtering policies to include the observed IP and hostname, and monitor for any reappearance of the host on other assets. Incident response should treat any credentials submitted to this site as compromised, and users previously exposed should be instructed to reset passwords and enable multi‑factor authentication where possible.