intradbro[.]top

Analysis indicates that the domain intradbro.top was registered on March 04, 2026 through Gname.com Pte. Ltd. and resolves to the IP address 162.254.39.21, which is hosted in the United States by AS22612 Namecheap, Inc. The domain lacks an SSL certificate, leaving traffic unencrypted, and the site is currently offline. Historical data show that it previously served a page with the title "Sofea-forex," suggesting a financial‑themed lure consistent with a generic phishing campaign. Four of ninety‑five VirusTotal scanners flagged the domain, implying that a subset of security engines detected suspicious patterns or known phishing signatures. Google Safe Browsing classifies the URL as social engineering, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing a high‑risk assessment.

The domain appears on three external blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL, indicating coordinated defensive actions. Nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com are typical of Namecheap‑based hosting, confirming the infrastructure provenance. Although multiple independent detections converge on a malicious profile, the exact page content, credential‑harvesting forms, or payload details remain unknown because the site is offline and no current HTTP response can be examined. Defenders should block intradbro.top at DNS and firewall layers, add the IP address 162.254.39.21 to deny lists, and monitor for any re‑activation of the domain.

Incident response teams ought to review logs for prior connections to the domain or IP, especially from users who may have accessed it before takedown. User education campaigns should warn about unsolicited financial offers referencing "Sofea-forex" and encourage verification of unexpected communications. Ongoing vigilance is advised given the recent creation date and the rapid deployment of phishing infrastructure.