limited[.]briggs-trade[.]pro

The domain limited.briggs-trade.pro is flagged as a credential theft phishing site impersonating BRIGGS TRADE LIMITED. Analysis indicates the domain was actively harvesting user login credentials through a fraudulent sign-in portal, as evidenced by the page title "Sign In | BRIGGS TRADE LIMITED." The domain is currently offline, though prior activity suggests a targeted effort to deceive users of the legitimate BRIGGS TRADE LIMITED platform.

Infrastructure analysis reveals the domain resolved to the IPv6 address 2a06:98c1:3121::3, hosted on Cloudflare’s network (AS13335). It was registered through Cloudflare, Inc., a common registrar for malicious domains due to its accessibility and privacy features. The domain was flagged by 14 of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious nature. Additionally, it appeared on one security blocklist and lacked an SSL certificate, a red flag for user security. No creation date was provided, but the absence of encryption and presence on blocklists suggest recent malicious deployment.

Current status confirms the domain has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, similar credential theft campaigns often re-emerge under new domains. Organizations and users are advised to monitor for domains impersonating BRIGGS TRADE LIMITED, particularly those using Cloudflare-hosted infrastructure. Network defenders should block the IPv6 address 2a06:98c1:3121::3 and any associated domains at the perimeter. Users who may have interacted with the domain should reset credentials immediately and enable multi-factor authentication on all accounts. Security teams are encouraged to review logs for connections to the reported IP or domain to identify potential compromise.