cuannnterus[.]com

The domain cuannnterus.com was registered on 2026-04-16 through Dynadot Inc. It uses the nameservers amos.ns.cloudflare.com and candy.ns.cloudflare.com and resolves to the IPv4 address 188.114.96.3. The host resides in Canada and is serviced by a CDN that provides TLS termination and HTTP/3 support. The live website returns HTTP 200 and presents a page titled “CUANNTERUS — Platform Blast WhatsApp Terpercaya”, explicitly referencing the Blast brand. The content is built with Vue.js and enforces HTTP Strict Transport Security, indicating a deliberate effort to mimic a legitimate Blast communication portal and to gain user trust. Analysis from a public malware aggregation platform shows that only one of ninety‑five security scanners flagged the domain, suggesting limited detection coverage. However, the domain appears on a single security blocklist and received a zero trust score from a local reputation engine, reflecting a high likelihood of malicious intent. The risk rating is assigned as high, and the infrastructure remains active. Defenders should immediately block network traffic to cuannnterus.com and its resolving IP address. Email gateways should be configured to reject messages containing URLs or references to this domain. Continuous monitoring for new subdomains or similar registration patterns is advised, as the actors may reuse the same hosting configuration for additional campaigns targeting the Blast brand.