spinblast-fever[.]click

Analysis of spinblast-fever.click shows a high‑risk brand‑impersonation campaign targeting the Blast brand. The site returns HTTP 200 and presents the page title "Afropari," which does not correspond to the advertised brand, indicating a possible mismatch between content and claimed impersonation. DNS resolution points to 172.67.162.7, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. The domain uses Cloudflare nameservers (aiden.ns.cloudflare.com, sierra.ns.cloudflare.com) and presents an Apache HTTP Server banner. TLS is provided by Google Trust Services / WE1, but the Gridinsoft trust score is 0 / 100, reflecting extreme suspicion. The domain was registered through Dynadot, LLC on 27 June 2025 and has been listed on one security blocklist. PhishDestroy currently blocks the domain, and three of ninety‑one VirusTotal scanners have flagged it as malicious. The site is still active, but no further content analysis beyond the title is available. Defenders should treat the domain as hostile, enforce network‑level blocking, monitor DNS queries for the associated IP and nameservers, and consider adding the domain to internal blocklists. Continuous observation is advised to detect any shifts in hosting or content that could affect mitigation strategies.