Looks like you guys might've had your domain blstsecurity.com taken over. The main website (blstsecurity.com) is redirecting users to a sus looking gambling website suhupendidikan.com Redirect can be seen using cURL curl https://blstsecurity.com/ -v And the subdomain to download cherrybomb "cherrybomb.blstsecurity.com" is not resolving