studio-blender[.]com

studio-blender.com was observed resolving to the IPv4 address 192.124.249.14, which is registered to AS30148 operated by Sucuri and geolocated to the United States. The domain was registered through Dynadot LLC on March 11, 2026 and is currently listed as offline, returning an HTTP 404 status code at the time of analysis. The associated SSL certificate is issued by Starfield Secure Certificate Authority – G2 and lists Starfield Technologies, Inc. as the issuer, indicating a publicly trusted certificate despite the malicious intent. Gridinsoft assigned a trust score of 0 out of 100, reflecting a highly untrusted reputation. VirusTotal recorded a single positive detection out of ninety‑four scanning engines, confirming that at least one security vendor identified malicious activity linked to the domain.

AlienVault OTX references the domain in one threat‑intelligence pulse, and three independent blocklists have added it to their deny lists. The domain is also blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a malicious resource. Technical analysis shows the site employed PHP, Sucuri web‑application firewall, reCAPTCHA, Google Tag Manager, Google Analytics, and HTTP/3, suggesting an attempt to appear legitimate while leveraging security‑focused tooling. The page title advertised “Download Blender 5.0 – Professional 3D Creation Suite,” yet the domain is flagged for impersonating Apple, indicating a brand‑impersonation campaign that may lure victims seeking Apple‑related support.

The listed scam type is a tech‑support scam, which aligns with the observed use of trusted security components to increase credibility. Uncertainty remains regarding the exact content delivered to end users, as the site returned a 404 response and no visual capture is available. Defenders should continue to block the IP address 192.124.249.