kast[.]asia

The domain kast.asia has been identified as a confirmed phishing site designed to impersonate a neo-banking platform under the false branding of KAST — Banking without the Bank. Analysis indicates this is a generic phishing operation targeting users’ financial credentials, likely aiming to harvest login details or facilitate unauthorized transactions. The site is currently offline, but prior activity suggests it was actively used in credential theft campaigns. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Name.com, Inc., and resolved to the IP address 216.150.1.129. It is flagged by 9 of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence sources. The domain appears on three independent security blocklists and is blocked by at least three major security tools. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. The site employed a Let’s Encrypt SSL certificate and was built using modern web technologies including Node.js, React, Vercel, Next.js, HSTS, and Webpack, which may have been used to lend an appearance of legitimacy. While kast.asia is currently offline, the infrastructure and registration details suggest potential for reactivation or migration to new domains. Organizations and users are advised to block the domain and associated IP at the network level. Security teams should monitor for similar domains registered through the same registrar or resolving to the same IP range. End users should be alerted to the KAST impersonation scheme and instructed to verify banking platforms only through official channels. If credentials were entered on this site, immediate password resets and multi-factor authentication reviews are strongly recommended.