bluerockasset[.]com

Analysis of bluerockasset.com indicates it is being used for a crypto drainer campaign. The site is classified under the generic_phishing threat type, and its risk level is currently marked as under_investigation. The page title returned from the server is "BLUEROCK HORIZON ASSET MANAGEMENT LTD," which aligns with the observed scam profile.

Infrastructure investigation shows the domain resolves to the IPv6 address 2606:4700:3030::6815:1001, hosted within the Cloudflare network (AS13335). The SSL certificate, identified as WE1, is present and active, indicating the site is reachable over HTTPS. Nameservers are dns1.tela-host.com and dns2.tela-host.com, and the domain was created on February 21, 2026 via NameSilo, LLC. No additional hosting or backend details have been disclosed.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. Gridinsoft reports a trust score of 0 out of 100, and VirusTotal shows 0 detections out of 95 scans, though this absence of detections does not imply safety. The overall status is listed as active, reinforcing the need for continued monitoring.

Defenders should prioritize blocking traffic to bluerockasset.com at both perimeter and endpoint layers. Adding the domain to internal blocklists and ensuring DNS filtering solutions deny resolution will reduce exposure. Continuous monitoring of outbound connections for attempts to interact with the listed IPv6 address is advised, as is periodic re‑scanning with multiple threat intelligence platforms to capture any future detections. Given the limited public intelligence, analysts should treat any user‑initiated contact with the site as suspicious and advise users to avoid providing cryptocurrency credentials or performing transactions on the domain.