blasgroup[.]site

The domain blasgroup.site is a phishing site engaged in brand impersonation, specifically targeting the cryptocurrency platform 'across'. It operates as a cryptocurrency scam, posing an elevated risk to users by attempting to deceive them into disclosing sensitive information or transferring assets. As of the latest verification, blasgroup.site has been taken offline, though prior activity indicates it was actively used for fraudulent purposes.

Technical analysis of blasgroup.site reveals limited detection by security vendors, with only 1 of 95 VirusTotal vendors flagging the domain. The domain was registered through Gname.com Pte. Ltd. on May 21, 2025, and resolves to the IP address 104.21.54.18, hosted by Cloudflare in the US. It appears on 1 security blocklist, specifically PhishDestroy, and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Blackstone Community', despite impersonating the 'across' brand. Technologies detected include Cloudflare and HTTP/3, with no drainer kit identified.

Users who interacted with blasgroup.site should take immediate steps to secure their accounts and assets. For cryptocurrency-related phishing, revoke any token approvals granted to suspicious sites and transfer funds to a new wallet. Monitor transaction histories for unauthorized activity. If credentials were entered, change passwords immediately and enable two-factor authentication (2FA) on all affected accounts. Report the domain to relevant platforms, including the impersonated brand's support team, and submit it to phishing databases such as Google Safe Browsing or PhishTank to prevent further abuse.