kastkast[.]blogspot[.]com
“KAST: The #1 Stablecoin App”
kastkast.blogspot.com — Não verificado. Tipo de golpe: Crypto Drainer. Resumo das evidências: VirusTotal 3/91 (ChainPatrol, alphaMountain.ai, Forcepoint ThreatSeeker); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. Registrador: Google Blogger.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
Analysis of kastkast.blogspot.com indicates that the site is being used for a high‑risk crypto‑drainer phishing campaign. The domain is hosted on Google Blogger and resolves to the IPv6 address 2606:4700:20::ac43:4634, which is assigned to AS15169 (Google LLC) located in Germany. HTTP requests receive a 301 redirect and the site presents a TLS certificate issued by Google Trust Services under the WE2 label, confirming the use of Google’s certificate infrastructure. Detected web technologies include Envoy, reCAPTCHA, HSTS, Google Analytics, Cloudflare Browser Insights and Cloudflare, suggesting a mixed CDN and security stack. The page title returned by the server is “KAST: The #1 Stablecoin App”, matching the reported scam type of a crypto drainer. The domain appears on three public security blocklists and is specifically blocked by PhishDestroy, MetaMask and SEAL. VirusTotal analysis shows that one of ninety‑one scanners flagged the domain, and the Gridinsoft trust score is 0/100, reinforcing the malicious assessment. The infrastructure details are limited to the hosting provider and the IPv6 address; no additional command‑and‑control endpoints or payloads have been observed. Defenders should immediately add kastkast.blogspot.com to URL filtering and DNS block lists, monitor outbound connections to the identified IPv6 address, and educate users about unsolicited requests to interact with “KAST” applications that request cryptocurrency credentials. Ongoing surveillance is advised to detect any changes in hosting or content, and any observed phishing emails should be reported to the relevant incident response teams.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 6 identified
Envoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io 100% de confiançareCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100% de confiançaHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% de confiançaCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaAnálise do VirusTotal
Análise da configuração do site
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo