Looks like you guys might've had your domain blstsecurity.com taken over.
The main website (blstsecurity.com) is redirecting users to a sus looking gambling website suhupendidikan.com
Redirect can be seen using cURL curl https://blstsecurity.com/ -v
And the subdomain to download cherrybomb "cherrybomb.blstsecurity.com" is not resolving