buranbet[.]life

The domain buranbet.life was registered on May 01, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently classified as a generic_phishing campaign with a high risk rating. Its status remains active as of the report date, July 12, 2026, and it is being used to lure victims into credential‑stealing interactions. Network analysis shows that buranbet.life resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. and is geolocated in Canada. The domain is served behind Cloudflare’s CDN using the authoritative name servers carlos.ns.cloudflare.com and carioca.ns.cloudflare.com. An SSL certificate issued by Let’s Encrypt (identifier E8) is present, indicating encrypted HTTPS traffic despite the HTTP response code 403 observed during probing. Threat intelligence sources corroborate the malicious nature of the domain. AlienVault OTX lists the domain in a single pulse, and it appears on one security blocklist where it is actively blocked by PhishDestroy. VirusTotal analysis reports that eight out of ninety‑five scanning engines flag the domain as malicious, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the high‑confidence assessment of phishing activity. Defenders should immediately block DNS resolution for buranbet.life and enforce URL filtering to prevent user access. Continuous monitoring of the associated IP address and the Cloudflare name servers is advised, as the infrastructure could be leveraged for additional malicious sites. Incident response teams should also consider sinkholing the IP and gathering forensic artefacts to support attribution and remediation efforts.