bloxlinks[.]live

The domain bloxlinks.live was registered on December 20, 2025 through NameCheap, Inc. and is currently taken offline. DNS resolution points to the Cloudflare edge address 104.21.44.102, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The authoritative nameservers are frank.ns.cloudflare.com and novalee.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. No TLS certificate was observed for the host, meaning the site did not present a valid HTTPS identity.

Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly suspicious reputation. VirusTotal scans returned 12 positive detections out of 93 security vendors, confirming that multiple anti‑malware products flagged the domain as malicious. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. AlienVault OTX records show the domain referenced in five separate threat‑intel pulses, reinforcing its association with malicious activity.

The page title retrieved from the site was "Bloxlink," and the campaign was classified as a brand impersonation targeting Discord users. While the exact landing page content is not available, the combination of registrar information, Cloudflare hosting, lack of encryption, low trust score, and multi‑vendor detections indicates a coordinated attempt to harvest credentials or otherwise deceive Discord users. Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the host, and incorporate the indicator set (domain, IP, nameservers, and detection counts) into threat‑intel feeds. Ongoing observation of related OTX pulses and blocklist updates is recommended to capture any re‑use of the infrastructure.