blockblastmodapk[.]com

Analysis of blockblastmodapk.com indicates a high-risk phishing domain registered on April 30, 2026, through NameCheap, Inc. The domain is currently active and resolves to IP address 188.114.96.3, hosted on infrastructure associated with Cloudflare, Inc. in Canada. Infrastructure review reveals the use of Cloudflare nameservers (emma.ns.cloudflare.com, rob.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). The domain returns an HTTP 301 redirect, though the destination remains unconfirmed. Detected technologies include DTScout, Cloudflare Browser Insights, and HTTP/3, suggesting modern web delivery methods. The domain appears on three security blocklists and is flagged by multiple threat intelligence sources, including PhishDestroy, MetaMask, and SEAL. The page title 'BUZZ' provides limited contextual insight, and no specific brand or scam type has been confirmed at this time. While 91 security vendors scanned the domain via VirusTotal, none currently flag it as malicious; however, the absence of detections does not confirm safety. The domain's Gridinsoft trust score of 0/100 further supports its classification as high-risk. Defenders are advised to block or monitor traffic to this domain, particularly given its recent registration and active status. Further analysis of redirect chains and payload delivery mechanisms is recommended to determine the exact phishing vector. No evidence of compromise or victim reporting has been identified in available intelligence, but the domain's infrastructure and detection profile align with known phishing campaigns.