trailblazers[.]points-check[.]icu

trailblazers.points-check.icu is a newly registered domain (created 27 May 2026) that is currently active and serving a credential‑phishing page. The site resolves to 104.21.26.36, a Cloudflare IP located in Canada, and uses a Let’s Encrypt E7 certificate. DNS is hosted on Cloudflare name servers (dawn.ns.cloudflare.com, quentin.ns.cloudflare.com). HTTP requests return a 403 status code and the page title reported is “Just a moment…”, indicating that the content is likely being shielded by Cloudflare’s protection mechanisms. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and has a Gridinsoft trust score of 0/100, reflecting a lack of trust. Threat intelligence flags the domain as a credential‑phishing operation; it appears on one security blocklist and is listed by PhishDestroy as blocked. VirusTotal analysis shows that 3 of 91 scanned security vendors have flagged the domain, confirming malicious intent. The evidence points to a typical phishing infrastructure that leverages Cloudflare for anonymity and rapid deployment. Uncertainty remains regarding the specific brand or service being spoofed, as the page title provides no indication and no additional content has been observed. Defenders should add the domain to outbound filtering rules, monitor DNS queries for the associated IP and name servers, and consider sharing the indicator set with threat‑intel platforms to improve collective detection. Continuous re‑scanning on VirusTotal and other sandbox services is recommended to capture any evolving payloads.