Domain security and threat intelligence

brpay.digital

Name: brpay.digital — PhishDestroy evidence record
Published: 2026-03-03
License: https://creativecommons.org/licenses/by/4.0/

In short

PhishDestroy first recorded brpay.digital on 2026-03-03. Stored VirusTotal result: 3/89 engines flagged.

“Вход - BrPay”

Review the evidence

Registrar: NameCheap
Resolved IP: 147.45.96.59JSC "TIMEWEB"
Registered: Mar 15, 2025
First observed: Mar 3, 2026

PhishDestroy assessment Critical

81/100

Evidence score

Availability Last known active Latest stored reachability observation Observed Nov 2, 2026 · 23:21 UTCHTTP probe

Risk signals

VirusTotal detections: 3/89

VirusTotal

3 / 89

engine detections

OTX

community references

URLScan

Malicious

engine verdict · score 97

Page captures

open gallery

Domain age

598 days

registered 2025-03-15 according to RDAP

Reports sent

view timeline

ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-03-03 00:07:50 UTC. The recorded recipient is abuse@timeweb.ru. The latest stored availability evidence still shows the domain reachable; 8 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

8 months

Reports sent

Latest case ID

PD-20260303-34CB74

Current status

HTTP 302 at latest stored check

Analysis

Domain summary

PhishDestroy first recorded brpay.digital on 2026-03-03. Stored VirusTotal result: 3/89 engines flagged. Risk: critical (81/100). Registrar: NameCheap. Status: Last known active. Hosting: JSC "TIMEWEB". PhishDestroy sent 1 abuse report. Do not enter credentials or connect a wallet.

Critical

Status: Last known active
VirusTotal: 3 / 89
Scam type (automated label): Generic Phishing
Hosting: 147.45.96.59JSC "TIMEWEB"
Registrar: NameCheap
Registered: Mar 15, 2025
OTX: 23 community refs
Page captures: 6

Page captures Source results Registration record

Recorded source summary

PhishDestroy stores a record for brpay.digital. Source observations are dated separately; missing checks do not establish safety.

A reviewed analysis is not available for this text revision. Consult the dated source records below.

Source evidenceVirusTotal 3 / 89 · OTX 23 references 11 sources

VirusTotal

3 / 89 engine detections

Retrieved / checked: 2026-09-12 04:26:20 · as stored; legacy timezone not established

Open report

URLScan

Malicious · engine verdict · score 97

2026-03-03 00:06 UTC

Open report

URLScanOriginal source recordObserved: 2026-03-03 00:06:38 UTC20 fields

Observed: 2026-03-03T00:06:38Z · Retrieved: 2026-10-23T00:42:09Z

Report ID

019cb104-833b-753c-9507-42031cc93b32

Final URL

https://brpay.digital/login

HTTP response

403

IP address

147.45.96.59

Contacted domains

check.ddos-guard.net

Contacted IP addresses

185.129.100.100
147.45.96.59

Autonomous systems (ASN)

57724
9123

Server countries

Document hash

236e1f7adc9a1146ce1059a532d313bbaec5b2fc285e9640e83e42205b316e92

Script hashes

f66b9e77a2c2aa5bbb5d1e185929eefec7ea7a5ab543cd32981acffd546e3f9e
e4752d853b2aeb1a9d2fbf5154e64b184f59df38f913a057cbf6eeacbce60aaa

JavaScript globals

Cookies

__ddg9_
__ddgid_
__ddgmark_
__ddg5_
__ddg2
__ddg2_
__ddg8_
__ddg10_

TLS session and certificate

Subject alternative names: brpay.digital
Cipher: AES_128_GCM
Issuer: R12
Subject: brpay.digital
Protocol: TLS 1.3
Valid until: 2026-05-30 10:17:11 UTC
Valid from: 2026-03-01 10:17:12 UTC

Domain age, days

352

Registered domain age, days

352

Certificate age, days

Certificate validity, days

Page requests

Provider verdicts

Engine verdict

Tags: urlscan-ml
urlscan-ml-60c5e22
Score: 97
Malicious: Yes

Overall verdict

Score: 0
Malicious: No

HTTP headers

Server: ddos-guard
Content-type: text/html; charset=UTF-8

Original source fields · JSON

Uuid	019cb104-833b-753c-9507-42031cc93b32
Final url	https://brpay.digital/login
Status	403
Ip	147.45.96.59
Contacted domains	[ "check.ddos-guard.net" ]
Contacted IP addresses	[ "185.129.100.100", "147.45.96.59" ]
Asns	[ "57724", "9123" ]
Countries	[ "RU" ]
Document hash	236e1f7adc9a1146ce1059a532d313bbaec5b2fc285e9640e83e42205b316e92
Script hashes	[ "f66b9e77a2c2aa5bbb5d1e185929eefec7ea7a5ab543cd32981acffd546e3f9e", "e4752d853b2aeb1a9d2fbf5154e64b184f59df38f913a057cbf6eeacbce60aaa" ]
Globals	[ "DDG" ]
Cookies	[ "__ddg9_", "__ddgid_", "__ddgmark_", "__ddg5_", "__ddg2", "__ddg2_", "__ddg8_", "__ddg10_" ]
Tls	{ "san": [ "brpay.digital" ], "cipher": "AES_128_GCM", "issuer": "R12", "subject": "brpay.digital", "protocol": "TLS 1.3", "valid_to": "2026-05-30T10:17:11Z", "valid_from": "2026-03-01T10:17:12Z" }
Domain age days	352
Apex age days	352
Tls age days	1
Tls valid days	89
Requests	10
Provider verdicts	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP headers	{ "server": "ddos-guard", "content-type": "text/html; charset=UTF-8" }

Separate monitor record · date not recorded

Separate stored monitor snapshot; does not replace the primary report record or establish current availability.

record_source: domain_monitor.urlscan
uuid: 019cb104-833b-753c-9507-42031cc93b32
report_url: https://urlscan.io/result/019cb104-833b-753c-9507-42031cc93b32/
score: null
malicious: null
result_at: null
enriched_at: 2026-03-24T12:10:52Z
source_timestamps: {"urlscan_result_at":null,"urlscan_enriched_at":"2026-03-24 13:10:52"}
timestamp_basis: Europe/Berlin, as used by the existing report; source timestamps are retained verbatim

URLQuery

checked — no detections recorded

2026-03-03 00:07 UTC

Open report

PhishStats

checked — no match recorded

2026-03-03 03:07:16 · check time as stored; timezone unknown

OTX

23 community references

2026-10-03 16:57 UTC

Open report