classaction-blockfi[.]com

This domain, classaction-blockfi.com, is identified as a generic phishing site designed to deceive users into divulging sensitive information such as login credentials and financial data. The threat level is elevated due to the domain's association with known phishing tactics and its use of familiar branding to trick unsuspecting visitors.

Analysis indicates that the domain is flagged by 4 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection but also highlighting the potential for it to bypass certain security measures. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on March 25, 2026. It resolves to the IP address 188.114.96.3 and is currently listed on three security blocklists, further corroborating its malicious intent. The site employs technologies such as WordPress, MySQL, PHP, and Cloudflare services, which can be used to create a convincing and dynamic phishing environment.

Users who have visited this domain are advised to immediately change passwords for any accounts related to BlockFi or similar financial services. Additionally, it is recommended to monitor financial statements and credit reports for any unauthorized activity. Enabling two-factor authentication (2FA) on all relevant accounts can also provide an extra layer of security. If any suspicious transactions or account compromises are detected, users should report them to their financial institution and consider running a full system scan to ensure no malware was installed.