brutal-spoofer[.]pro

PhishDestroy identifies brutal-spoofer.pro as an active spoofing-as-a-service domain currently under investigation for phishing campaigns. This domain is explicitly categorized under the threat type 'generic_phishing' and remains in an active status as of the latest intelligence update. brutal-spoofer.pro was flagged by 1 of 95 VirusTotal vendors, indicating a lack of immediate detection despite its malicious intent. The domain was registered through Spaceship, Inc., resolves to the IP address 188.114.96.3, and holds an SSL certificate issued by Google Trust Services. The domain was created on March 27, 2026, and currently shows no presence on any known blocklists or threat intelligence feeds. PhishDestroy assesses brutal-spoofer.pro as a high-risk domain due to its active status and the absence of detections despite its spoofing-as-a-service nature. Users are strongly advised to avoid any interaction with this domain, report it to their security teams or relevant authorities, and ensure their systems are updated with the latest threat intelligence. Additionally, organizations should consider blocking the IP address 188.114.96.3 and the domain at the network perimeter to prevent potential compromise. Continuous monitoring of this domain and associated infrastructure is recommended due to its evolving threat landscape.