4882.bluefin.pr.app.bluefin.foundation

Independent blocklist providers including PhishDestroy, MetaMask, and SEAL have explicitly listed the domain, and it appears on three additional security blocklists, reinforcing the likelihood of abusive use. No public page title or content analysis is available, so the exact nature of the phishing lure cannot be confirmed beyond the generic classification supplied. The limited detection coverage combined with the active status and the presence on multiple blocklists warrants a high‑risk rating.

Defenders should deny outbound connections to the resolved IP address, add the fully qualified domain name to DNS‑based deny lists, and monitor for any related traffic patterns. Continuous re‑evaluation is advised because the lack of nameserver information may change, and additional scanning engines could raise the detection count. Until further forensic evidence is collected, the domain should be treated as a malicious phishing infrastructure.