app[.]bleap[.]cam

The domain app.bleap.cam was identified as a generic phishing threat posing a risk to unsuspecting users. It is currently offline, having been taken down after being flagged by security researchers. The domain was created on April 29, 2026, and registered through Dynadot LLC, resolving to IP address 188.114.96.3. It appears on one security blocklist, and VirusTotal reports that 2 out of 95 security vendors flag this domain as malicious. The SSL certificate was issued by Let's Encrypt, which is commonly used by legitimate sites but also abused by phishers.

PhishDestroy assesses this domain as elevated risk due to its recent creation and presence on blocklists. Although the domain is now offline, users who may have interacted with it should be cautious. Generic phishing domains like this often aim to steal credentials or deploy malware through fake login pages or prompts. The low blocklist count suggests it was not widely reported, but any user who visited the site should monitor for suspicious activity.

To stay safe, always verify the legitimacy of domains before entering personal information. Use PhishDestroy to check if a domain is known for phishing. If you have already visited app.bleap.cam, change any passwords used elsewhere and enable multi-factor authentication. Report any phishing attempts to relevant authorities to help protect others.