blendercn[.]cn

This domain, blendercn.cn, is currently under investigation for generic_phishing activity targeting users of the Blender software suite. The site impersonates the official Blender Chinese community, as indicated by its page title, "Blender 中文官网 | 自由开源的3D创作套件," which closely mimics the branding of the legitimate open-source 3D creation tool. As of the latest analysis, the domain remains active and has not been flagged by security vendors, though its infrastructure and registration details warrant further scrutiny. Infrastructure analysis reveals the domain was registered on May 17, 2026, through 厦门易名科技股份有限公司, a registrar based in China. It resolves to the IP address 150.109.14.131, which has not been widely flagged in threat intelligence feeds. VirusTotal reports 0 detections out of 95 security vendors, indicating no overt malicious activity has been identified at this time. The SSL certificate is issued by TrustAsia Technologies, Inc., a legitimate certificate authority, which may contribute to the domain's appearance of legitimacy. No blocklist entries or trust score anomalies were identified during the initial assessment. Current findings suggest the domain may be an early-stage phishing attempt or a misconfigured legitimate mirror, though the 2026 creation date is anomalous and raises concerns. Users are advised to exercise caution when accessing blendercn.cn and verify its authenticity through official Blender channels. Organizations should monitor network traffic to 150.109.14.131 and consider temporarily blocking the domain pending further investigation. If interaction with the site is necessary, users should avoid entering credentials or downloading files until the domain's status is confirmed. Security teams are encouraged to conduct deeper analysis, including behavioral inspection of the site's content and certificate transparency logs for additional indicators of compromise.