blockfinazservice[.]live

The domain blockfinazservice.live was registered on June 13 2026 through Dynadot Inc. It is currently active and resolves to the IPv4 address 51.75.165.119. The domain is served by the authoritative name servers ns1.cloudoon.com, ns2.cloudoon.net, and ns3.cloudoon.org. Reputation data shows that ten of ninety‑one antivirus and URL‑filtering engines on VirusTotal have flagged the domain, indicating a consensus of malicious behavior among a minority of scanners. The domain appears on one external security blocklist and is explicitly blocked by the PhishDestroy mitigation service, reinforcing the classification as a phishing infrastructure. The risk rating assigned by internal scoring is high.

Evidence confirms that the domain is being used for generic phishing, though the specific lures or targeted brands have not been disclosed in the available intelligence. No public page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts have been released, leaving the exact content of the hosted pages unknown. Likewise, there is no indication of additional infrastructure such as content delivery networks, secondary IPs, or shared hosting relationships. Defenders should add blockfinazservice.live to deny‑list rules in firewalls, DNS resolvers, and endpoint web filters.

Network monitoring should flag outbound connections to 51.75.165.119 and to the three cloudoon name servers. Since the domain is already listed by PhishDestroy, organizations using that service will benefit from automatic blocking, but independent controls are recommended. Continuous re‑evaluation is advised because the domain may evolve its payloads or host additional malicious pages. Analysts should monitor future VirusTotal submissions, blocklist updates, and any newly observed HTTP or certificate fingerprints to refine detection signatures.