brooklyn-m-berry[.]com

Analysis of brooklyn-m-berry.com indicates it operated as a generic phishing domain prior to being taken offline. The domain was registered through the RIPE NCC registrar and resolved to the IP address 5.42.65.101, hosted on AS39493 (CJSC Kolomna-Sviaz TV) in Russia. No SSL certificate was present at the time of assessment, increasing the likelihood of unencrypted credential harvesting or malware distribution. The page title, 'World news – e-enable synergistic initiatives,' does not align with typical news or corporate branding, suggesting an attempt to obfuscate the site's true purpose or evade keyword-based detection.

Infrastructure analysis reveals minimal nameserver redundancy (1 nameserver) and inclusion on a single security blocklist, indicating early-stage detection before broader industry flagging. Gridinsoft assigned a trust score of 0/100, reflecting high-risk characteristics. While VirusTotal scans conducted by 95 vendors returned no detections, this absence does not confirm safety; phishing domains often evade initial scans through obfuscation or delayed payload delivery. The domain's current offline status limits further forensic analysis, but historical records confirm its prior resolution and HTTP activity.

Defenders should treat this domain as a confirmed phishing indicator. Recommended actions include blocking the domain and IP (5.42.65.101) at network perimeters, monitoring for related infrastructure (e.g., subdomains, adjacent IPs on AS39493), and reviewing logs for prior connections. Given the lack of SSL and the hosting provider's association with other malicious activity, assume any prior interaction with this domain involved unencrypted data exposure. No specific brand or scam subtype has been attributed to this domain based on available evidence.