gosrcgrowthpartner[.]com

The domain gosrcgrowthpartner.com was registered on September 27, 2025 through Porkbun LLC and uses the authoritative nameservers curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, and salvador. The domain resolves to IP address 162.159.140.166, which belongs to the AS13335 network operated by Cloudflare and is geolocated to the United States. HTTP requests receive a 301 redirect and the site presents a valid TLS certificate issued by Let’s Encrypt (R13). The page title returned by the server is "VSL Call Funnel", and the site is classified as a brand‑impersonation campaign targeting the Blast brand. Infrastructure analysis shows the presence of components commonly associated with e‑commerce site builders, video‑hosting platforms, payment processors, and cloud services, indicating a multi‑layered web stack. The domain appears on two independent security blocklists and is actively blocked by PhishDestroy and ScamSniffer. VirusTotal scans report two detections out of ninety‑five analyzed engines, and the Gridinsoft trust score is 0 out of 100, supporting a high‑risk assessment. The campaign remains active as of the report date. Defenders should treat the domain as malicious, enforce network‑level blocking, monitor DNS queries for the associated IP and nameservers, and consider broader threat‑intel correlation with other observed Blast‑impersonation activities.