reidoazar[.]rest

The domain reidoazar.rest was registered on August 08, 2025 through Web Commerce Communications Limited and currently resolves to the IPv4 address 57.129.97.29 hosted by OVH SAS in Germany under ASN 16276. The site is listed on at least one security blocklist and is actively blocked by PhishDestroy, indicating that threat‑intelligence feeds have flagged it as malicious. VirusTotal analysis shows that one out of ninety‑five scanning engines flagged the domain, providing an early indication of suspicious content. Infrastructure inspection reveals the authoritative name servers boyd.ns.cloudflare.com and maleah.ns.cloudflare.com, both belonging to Cloudflare’s DNS service, a common choice for fast‑deployment malicious infrastructure.

The domain does not present an SSL/TLS certificate, meaning connections are unencrypted and facilitating credential capture on insecure HTTP. Gridinsoft’s trust scoring system assigns a score of zero out of one hundred, reflecting an extremely low reputation. The page title returned from the live host reads “REIDOAZAR | Enter the world of sport and stakes!”, and the kit associated with the site is identified as the Gambler Scam kit, which is frequently used to impersonate gambling‑related brands. Threat actors have linked the operation to the brand Blast, as indicated by the “impersonates: blast” tag, suggesting that users may be lured by a counterfeit Blast‑branded experience.

Because the site is currently offline, active exploitation is not observable, but the presence of the malicious kit and the blocklist entries imply that the domain was previously used for credential harvesting or payment fraud. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor for any resurgence of the IP address or associated Cloudflare name servers, and update detection signatures to include the observed page title and kit identifiers.