bratiyanetworkekek[.]icu

Analysis of the domain bratiyanetworkekek.icu indicates a high-risk phishing infrastructure targeting login credentials, despite its current offline status. The domain was registered on March 16, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with abusive registrations. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers cora.ns.cloudflare.com and justin.ns.cloudflare.com, resolving to the IP 172.67.175.21 located in Canada. The domain employs a Let's Encrypt SSL certificate (serial E8), a common tactic to lend superficial legitimacy to phishing pages, while Cloudflare Browser Insights and HTTP/3 are detected, suggesting an attempt to mimic modern web infrastructure.

At the time of assessment, the domain returns an HTTP 404 error with the page title 'Error 404 (Not Found)!!1,' which may indicate either a takedown, a temporary placeholder, or a cloaking mechanism designed to evade automated detection. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged by 15 of 91 security vendors on VirusTotal, confirming its malicious classification. Gridinsoft assigns a trust score of 0/100, further corroborating its fraudulent nature.

While the exact brand or service being impersonated is not explicitly identified in the available data, the combination of a credential-harvesting phishing classification, Cloudflare obfuscation, and blocklist presence strongly suggests an intent to deceive users into submitting sensitive information. Defenders should treat this domain as compromised and maintain its blocklist status across security gateways, email filters, and endpoint protection systems. Monitoring for re-emergence or related domains under the same registrar or nameserver patterns is recommended, as threat actors often re-deploy infrastructure with minor variations.