blocdeck[.]com

Analysis conducted on July 25, 2026 identifies blocdeck.com as an active phishing domain targeting financial services. The domain is registered through HOSTINGER operations, UAB, with nameservers artemis.dns-parking.com and hermes.dns-parking.com, a configuration commonly observed in low-cost, high-volume hosting setups favored by phishing operators. At the time of assessment, the domain returns an HTTP 200 status, indicating a live web server, though the exact content served remains unconfirmed due to limited forensic sampling. Infrastructure analysis reveals the domain appears on one security blocklist, and PhishDestroy has issued a block directive.

VirusTotal telemetry indicates that four of ninety-one security vendors flag blocdeck.com as malicious, though the absence of additional context—such as brand impersonation or phishing kit signatures—limits attribution beyond generic phishing classification. No Safe Browsing or Open Threat Exchange records were provided in the available intelligence, leaving uncertainty regarding broader detection coverage or historical campaign linkage. The registrar, HOSTINGER operations, UAB, is frequently utilized by threat actors due to its permissive registration policies and bulk domain offerings. While no associated IP or autonomous system number is supplied, the DNS parking nameservers suggest a disposable or low-reputation hosting environment, consistent with short-lived phishing infrastructure.

Defenders are advised to treat blocdeck.com as high-risk and implement blocking at the DNS or network layer. Organizations should monitor for credential submission attempts or financial transaction redirection patterns commonly associated with financial phishing domains. Further investigation into SSL certificate transparency logs and passive DNS records may yield additional infrastructure or campaign linkages, though such analysis exceeds the scope of this initial assessment.