blackspurtik-bs[.]com

blackspurtik-bs.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The domain resolves to 172.67.223.185, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS is served by Cloudflare’s authoritative name servers lauryn.ns.cloudflare.com and rudy.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, indicating normal TLS negotiation. An HTTP request returns a 302 redirect, a pattern frequently observed in phishing infrastructure to forward victims to malicious payloads or credential‑harvesting pages.

The page title returned by the server is “BLACKSPRUT — магазин материалов для ремонта мебели | bs2best зеркало | blsp официальный сайт”, which suggests the domain is being used to impersonate a Russian‑language furniture‑repair materials retailer. No additional content analysis is available, so the exact lure or credential‑capture mechanism remains unconfirmed. Threat intelligence flags the domain as a generic phishing site; the classification is supported by its inclusion on one security blocklist and by PhishDestroy, which has actively blocked the domain. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent.

VirusTotal reports that 2 of 93 scanning engines have flagged the domain, providing independent corroboration of its malicious reputation. The limited number of detections may be due to the recent registration date, but the presence of any positive detections reinforces the assessment. Defensive teams should add the domain and its resolved IP address to deny‑list and DNS‑sinkhole policies, monitor outbound connections to Cloudflare‑hosted IP ranges for anomalous traffic, and enable web‑gateway filtering for the observed page title. Continuous re‑evaluation is advised, as the underlying content could evolve or additional detections may appear.