hastlecas[.]com

The domain hastlecas.com is a confirmed phishing site engaged in brand impersonation targeting users of the platform 'blast'. It presents itself as a legitimate sports and betting portal but is designed to harvest login credentials or other sensitive information through deceptive means. No crypto drainer kit was identified in this campaign. As of the latest verification, hastlecas.com has been taken offline, though prior activity remains a risk for those who interacted with it.

Technical indicators confirm the malicious nature of hastlecas.com. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0 out of 100. It appears on 1 security blocklist, specifically PhishDestroy. Registered through MAT BAO CORPORATION on July 30, 2025, the domain resolves to the IP address 57.129.97.29, hosted by OVH SAS in Germany (AS16276). No SSL certificate was issued for the site, and the observed page title was 'HASTLECAS | Enter the world of sport and stakes!'. The domain uses a single nameserver and currently returns an HTTP 429 status code.

Individuals who visited hastlecas.com should immediately change any passwords or credentials entered on the site, particularly for accounts associated with 'blast'. Enable two-factor authentication (2FA) on all relevant platforms to mitigate further risk. Monitor financial and account activity for signs of unauthorized access or fraud. Report the phishing domain to the impersonated brand's security team, as well as to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader takedown efforts.