driveline[.]blastconnect[.]com

The domain driveline.blastconnect.com is currently active and resolves to the Amazon‑owned IP address 3.13.15.171 (AS16509, United States). The domain was registered on July 7, 2016 through Amazon Registrar, Inc., and its DNS configuration uses four AWS name servers (ns-1411.awsdns-48.org, ns-1829.awsdns-36.co.uk, ns-329.awsdns-41.com, ns-674.awsdns). A TLS certificate issued to “Amazon / Amazon RSA 2048 M04” covers the host, confirming that the site is hosted on Amazon Web Services infrastructure. An HTTP 301 redirect is observed, and the page title returned by the server is “Driveline | Log in”, matching the declared brand target Blast. VirusTotal records show that one of ninety‑five scanning engines flagged the domain, and the site appears on a single external security blocklist. Independent monitoring services such as PhishDestroy have already blocked the domain, and the Gridinsoft trust score is 0 out of 100, indicating a high likelihood of malicious use. The available evidence points to a credential‑phishing campaign that attempts to harvest Blast account credentials. Defenders should add the domain to URL filtering and DNS block lists, monitor for traffic to the associated IP range, and consider sinkholing the address to disrupt the infrastructure. Additional analysis of the landing page content is required to confirm the exact phishing workflow.