brocsn[.]com

The domain brocsn.com was registered on April 24, 2026 and currently returns an HTTP 301 redirect. The page title returned from the host reads 'BroCas - онлайн казино, где всё по-честному | Забирай свой бонус!', indicating the site advertises an online casino in Russian. The domain is classified as a generic phishing threat and is listed as active.

Technical infrastructure shows the domain resolves to the IPv4 address 3.71.180.249, which belongs to an Amazon Web Services EC2 instance in the eu-central-1 region, physically located in Germany. The site uses a Let’s Encrypt certificate issued for one year, confirming TLS encryption but offering no additional trust signals. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records two detections out of ninety‑five scanned security vendors.

Threat intelligence sources place brocsn.com on a single security blocklist and note that it has been observed by PhishDestroy and appears in one AlienVault OTX pulse. The registration was performed through Fewmoretaps OU d/b/a Trustname.com, a registrar often associated with rapid domain provisioning. The combination of a newly created domain, low reputation scores, a generic casino‑related title, and limited but confirmed detections supports a high risk assessment for phishing activity targeting Russian‑speaking users.

Defenders should block DNS resolution for brocsn.com at network perimeters and enforce URL filtering policies that deny access to the domain. Monitoring should include alerts for outbound connections to the 3.71.180.249 IP and for TLS handshakes using the associated Let’s Encrypt certificate. Incident response teams should treat any credential submissions or payment information entered on this site as compromised and advise affected users to change credentials immediately.