westinedu[.]github[.]io

This domain, westinedu.github.io, is currently flagged as an active high-risk brand impersonation threat targeting BLAST, a cryptocurrency platform. Analysis indicates the domain is designed to deceive users by mimicking the legitimate BLAST brand, potentially facilitating fraudulent activities such as credential theft or cryptocurrency scams. The page title, AIGraph, does not align with the expected branding of BLAST, further suggesting malicious intent. Infrastructure analysis reveals the domain is hosted on GitHub, Inc. infrastructure and resolves to the IP address 185.199.109.153, located in the United States under AS54113 (Fastly, Inc.). The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains. Detection metrics indicate the domain is flagged by 2 of 95 security vendors on VirusTotal, while it appears on one security blocklist and is actively blocked by at least one threat intelligence feed. The domain remains operational as of the latest assessment, with no evidence of takedown or mitigation. Given the active status and confirmed brand impersonation, users and organizations are advised to treat this domain as malicious. Immediate steps should include blocking the domain and associated IP address (185.199.109.153) at the network level, as well as alerting personnel to the threat. Monitoring for similar domains registered through GitHub Pages or resolving to Fastly infrastructure may help identify related campaigns. End-users should verify the authenticity of any communication or website claiming affiliation with BLAST, particularly those prompting cryptocurrency transactions or credential input.