layenrbrett[.]com

layenrbrett.com was registered through NameCheap, Inc. on 21 February 2026. The domain resolves to the IPv4 address 149.28.147.41, which is allocated to AS20473 The Constant Company, LLC in Singapore. DNS resolution is served by dns1.registrar-servers.com and dns2.registrar-servers.com. No TLS certificate is presented; the site advertises a page title “VPSSIM - Website chưa có SSL hợp lệ”, indicating the absence of a valid SSL certificate.

The domain appears on a single security blocklist and is specifically listed by PhishDestroy as an offline malicious resource. VirusTotal analysis shows that 1 of 93 scanned security vendors flagged the domain, confirming at least one detection. The limited detection footprint, combined with the recent registration date and lack of HTTPS, suggests a low‑cost phishing infrastructure. The exact payload or targeted brand has not been disclosed, and the content of the site has not been captured, leaving the precise phishing vector uncertain.

Defenders should add the domain and its associated IP address to blocklists, monitor for any resurrection of the host, and ensure that any outbound traffic to 149.28.147.41 is denied. In addition, security teams should watch for newly registered domains using the same registrar‑servers.com name servers that lack SSL, as this pattern may indicate a broader campaign. Continuous telemetry from DNS, proxy, and endpoint logs is recommended to detect potential future attempts to reuse the infrastructure.