blrk[.]cc

Analysis of the domain blrk.cc shows a recent offline status but retains multiple indicators of malicious activity. The domain was registered on 17 December 2022 through NiceNIC International Group Co., Limited, and it resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc., a common hosting provider for malicious infrastructure. DNS resolution is handled by the Cloudflare nameservers kianchau.ns.cloudflare.com and marlowe.ns.cloudflare.com. No SSL certificate is presented, meaning the site served traffic over plain HTTP, a characteristic often leveraged to simplify credential capture.

The page title returned when the site was online reads “Nur einen Moment…”, a generic phrase that does not reveal the intended victim brand or service. Gridinsoft assigned a trust score of 0 / 100, indicating a high confidence of malicious intent. The domain appears on one known security blocklist and has been explicitly blocked by PhishDestroy, confirming that at least one reputable anti‑phishing service identified it as abusive. VirusTotal scans show that three out of ninety‑five security vendors flagged the domain, providing additional independent corroboration of its suspicious nature.

Because the site is currently taken offline, direct observation of its content is unavailable, and the precise phishing lure or credential‑harvesting mechanism cannot be confirmed. Defenders should maintain the block on 188.114.96.3 and monitor for any re‑hosting of the same domain or similar Cloudflare‑hosted assets. Network traffic to the domain should be denied, and any endpoints that previously accessed it should be inspected for potential credential compromise. Ongoing watch‑list updates from PhishDestroy and similar blocklists are recommended to capture any future re‑activations.