bloki-logn[.]zapier[.]app

This domain, bloki-logn.zapier.app, is identified as a fake login site designed to mimic the legitimate BlockFi login page. The primary threat posed by this domain is the potential for credential theft, where unsuspecting users are tricked into entering their login information, which is then harvested by the attackers. This can lead to unauthorized access to user accounts, financial loss, and further exploitation of personal data.

Analysis indicates that the domain has been flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain was registered through Name.com, Inc., which is a reputable registrar, but this does not necessarily imply legitimacy, as threat actors often use reputable services to avoid immediate detection. The SSL certificate is issued by Let's Encrypt, a widely trusted certificate authority, which adds to the site's credibility and increases the likelihood of users falling for the phishing attempt. The domain has also appeared on one security blocklist, further corroborating its malicious nature.

If a user has visited bloki-logn.zapier.app, it is recommended to immediately change the passwords for any BlockFi accounts and any other accounts where the same credentials were used. Users should also monitor their accounts for any unauthorized activity and consider enabling multi-factor authentication (MFA) for an added layer of security. In addition, users should report the incident to their financial institution and to BlockFi's customer support to alert them of the potential phishing threat. Regularly updating security software and being cautious of unsolicited login links can help prevent future exposure to similar threats.