blofin-web[.]at

The domain www.blofin-web.at is a generic cryptocurrency phishing site designed to deceive users into entering login credentials under the false pretense of a trading platform. It does not impersonate a known brand or employ a drainer kit but presents itself as a legitimate crypto exchange with the page title 'Blofin Login Dashboard | Sign In to Trade Crypto Safely & Profitably.' The site is currently taken offline, reducing immediate risk to users.

Technical analysis shows www.blofin-web.at was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). Google Safe Browsing has not flagged the domain. It is registered through Ddos-guard, resolves to the IP address 45.10.243.7 (located in Russia, AS57724 DDOS-GUARD LTD), and uses an SSL certificate issued by Let's Encrypt (R12). Detected technologies include jQuery, Hammer.js, and DDoS-Guard. The domain's nameservers are pns61.cloudns.net, pns62.cloudns.com, pns63.cloudns.net, and pns64.cloud.uk. Gridinsoft assigns it a trust score of 0/100.

Users who interacted with www.blofin-web.at should immediately change any passwords entered on the site and enable two-factor authentication on their legitimate crypto exchange accounts. Monitor financial statements and transaction histories for unauthorized activity. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If cryptocurrency was involved, revoke any token approvals granted to unknown contracts and consider moving funds to a new wallet for added security.