bluefin-locksmith-and-garage-doo[.]gitbook[.]io

bluefin-locksmith-and-garage-doo.gitbook.io was registered on 2026-02-21 through Cloudflare, Inc. The domain resolves to the Cloudflare edge address 172.64.147.209 located in the United States and is served over HTTPS with a Google Trust Services certificate (WE1). HTTP requests receive a 307 temporary redirect and the site supports HTTP/3. Infrastructure analysis shows the domain is protected by Cloudflare’s CDN and routing, indicating the operators are leveraging legitimate hosting to obscure origin. Threat intel lists the site as a high‑risk generic phishing campaign; it is currently flagged by PhishDestroy and appears on one external blocklist. The Gridinsoft trust score is 0/100, and VirusTotal reports a single vendor detection out of 93, suggesting at least one security product identified malicious behavior. The page title “Bluefin Locksmith And Garage Door Services | Untitled” implies the campaign may be targeting users seeking locksmith or garage‑door assistance, though the actual content has not been examined. Uncertainty remains regarding the specific phishing payload, credential‑capture mechanisms, or additional infrastructure components. Defenders should block the domain at network perimeter, add the IP address 172.64.147.209 to deny lists, monitor for outbound connections to the host, and ensure email filters quarantine messages referencing “Bluefin Locksmith” or similar keywords. Continued observation is recommended to capture any changes in page content or additional indicators.