bravermere-trust[.]net

Analysis of bravermere-trust.net confirms its classification as an active phishing domain targeting financial or trading entities, specifically impersonating an AI-driven trading platform. The domain was registered on June 11, 2026, through DYNADOT LLC, with nameservers gerardo.ns.cloudflare.com and sara.ns.cloudflare.com, indicating reliance on Cloudflare infrastructure. It resolves to IP 172.67.151.249, hosted on AS13335 (Cloudflare, Inc.) in the United States, a common pattern for phishing sites leveraging Cloudflare’s proxy services to obscure origin servers. The page title, 'Bravermere Trust – Advanced AI Trading Solution,' explicitly signals an attempt to mimic a legitimate financial or investment service, aligning with the 'Brand Impersonation' scam type noted in threat intelligence sources. Technical indicators further support malicious intent. The domain is flagged by six security vendors on VirusTotal and appears on three blocklists, including PhishDestroy, MetaMask, and SEAL. A Gridinsoft trust score of 0/100 and inclusion in an AlienVault OTX threat intelligence pulse reinforce its high-risk status. Detected technologies include HSTS, Google Analytics, Cloudflare Browser Insights, and HTTP/3, suggesting an effort to appear legitimate while leveraging analytics for tracking victims. The SSL certificate, issued by Google Trust Services (WE1), is consistent with modern phishing sites that use valid encryption to evade browser warnings. Defenders should treat this domain as confirmed malicious infrastructure. The combination of recent registration, brand impersonation, Cloudflare hosting, and multi-source blocklisting justifies immediate blocking at the DNS or network level. Further investigation may reveal additional connected domains or campaigns, particularly if the same registration details or hosting patterns are observed.