bro100500[.]com

Analysis of bro100500.com indicates that it is an active generic phishing infrastructure targeting users of an online casino service, as suggested by the page title “BroCas – онлайн казино, где всё по-честному | Забирай свой бонус!”. The domain was registered on 24 April 2026 through Fewmoretaps OU d/b/a Trustname.com and immediately resolved to the CloudFlare‑protected address 188.114.97.3, which is located in Canada. The site presents a valid SSL certificate issued by Google Trust Services (WE1), and HTTP requests return a 302 redirect, a pattern frequently observed in credential‑harvesting campaigns. Threat intelligence sources corroborate the malicious nature: the domain appears on one security blocklist, is listed in eight AlienVault OTX pulses, and has been blocked by PhishDestroy. VirusTotal scans show three of ninety‑one security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 / 100. The limited detection count suggests that the campaign is relatively new or evading broader detection. Current evidence does not reveal the exact landing page content or the data‑collection mechanism, leaving the specific phishing vector uncertain. Defenders should prioritize immediate blocking of bro100500.com and its resolved IP 188.114.97.3 at network perimeter, monitor DNS queries for the domain, and consider adding the address to threat‑intel feeds. Continued observation of related OTX pulses and future VirusTotal scans is recommended to track any evolution of the payload or additional compromised hosts.