blastfi[.]app

The domain blastfi.app is identified as a brand impersonation threat targeting the Blast brand. The domain is currently offline and poses an elevated risk level. Analysis indicates that this domain was created on November 02, 2025, and has been flagged by 9 of 95 security vendors on VirusTotal. The domain resolves to the IP address 172.67.202.235 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of security to unsuspecting users.

Infrastructure analysis reveals that blastfi.app is registered through Porkbun LLC. The domain has appeared on 6 security blocklists, indicating significant suspicious activity. The page title 'Monad Claim Portal' suggests that the domain was designed to mimic a legitimate portal, potentially to trick users into providing sensitive information or credentials. The use of a reputable SSL certificate and the appearance on multiple blocklists highlight the domain's sophistication and the potential for successful phishing attempts.

As of the latest assessment, blastfi.app is offline. However, it is recommended that users and security teams remain vigilant and monitor for any reactivation or similar domains. Security teams should ensure that domain blocklists and security software are updated to include this domain. Additionally, users should be educated on the importance of verifying URLs and looking for signs of phishing, such as unusual domain names or unexpected requests for personal information.