brannahome[.]com[.]tr

This domain, brannahome.com.tr, is actively flagged as a credential theft operation. Analysis indicates the site impersonates legitimate login portals to harvest user credentials, likely targeting individuals through deceptive authentication prompts. No direct evidence of crypto drainer kits or brand-specific impersonation (e.g., financial institutions, e-commerce) was identified, but the generic credential theft framework aligns with broader phishing campaigns observed in the wild. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 5.180.185.136 and was registered on February 04, 2026, through an undisclosed registrar. Google Safe Browsing classifies the site under the SOCIAL_ENGINEERING category, and VirusTotal reports 10/95 security vendors flagging the domain as malicious. The domain appears on two security blocklists (PhishDestroy and OpenPhish) and is referenced in one AlienVault OTX threat intelligence pulse. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. As of the latest verification, brannahome.com.tr remains active, with no evidence of takedown or mitigation. The domain's creation date suggests it may be part of a recently deployed campaign, and its presence on multiple blocklists indicates sustained malicious activity. Organizations and individuals are advised to block the domain at the DNS or network level, revoke any credentials potentially exposed to the site, and monitor for unauthorized access attempts. Given the high-risk classification and active status, continued vigilance is recommended, particularly for users who may have interacted with the domain prior to its detection.