damnbruh[.]eu

Analysis of the domain damnbruh.eu indicates it was actively involved in a wallet seed phishing campaign targeting cryptocurrency users. The domain resolved to IP address 104.21.62.129, hosted on Cloudflare's network (AS13335) with no SSL certificate present. Infrastructure analysis reveals the domain was registered through IMMATERIALISM LIMITED and used Cloudflare nameservers (jocelyn.ns.cloudflare.com and konnor.ns.cloudflare.com). The page title, 'DamnBruh — Real-time multiplayer snake game with SOL rewards,' suggests an attempt to lure users with promises of Solana-based rewards, a common tactic in cryptocurrency phishing schemes.

Detection data supports this classification: the domain appears in four AlienVault OTX threat intelligence pulses and is flagged by 8 of 95 security vendors on VirusTotal. It is also listed on two security blocklists and is explicitly blocked by PhishDestroy and ScamSniffer. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious nature. As of July 23, 2026, the domain has been taken offline, though defenders should remain cautious of residual risks, such as cached pages or related infrastructure.

The scam type is identified as wallet/seed phishing, a method used to harvest sensitive credentials or recovery phrases. While the exact content of the phishing page remains unanalyzed, the combination of the page title, detection counts, and blocklist presence provides sufficient evidence to classify this as a confirmed phishing domain. Defenders are advised to monitor for related domains registered under the same registrar or resolving to the same IP range, as threat actors often reuse infrastructure. No additional brand impersonation or phishing kit details are available at this time.