baracct[.]com

Analysis of baracct.com shows a newly registered domain (created 22 May 2025) that resolves to IP 107.173.193.235, hosted by AS36352 (HostPapa) in the United States. The domain is listed on a single security blocklist and has been taken down by PhishDestroy, indicating that it was actively used for malicious activity before being offline. The SSL certificate is identified as R12, which is typical for free or low‑cost certificates often employed by threat actors. Reputation services assign extremely low scores: Scamadviser rates the site 1/100 and Gridinsoft 0/100, both reflecting a high likelihood of abuse.

VirusTotal reports that 2 of 93 scanning engines flagged the domain, confirming the presence of malicious indicators despite the low detection count. The page title returned from the live site, “Home | Mobile Banking, Credit Cards, Mortgages, Auto Loan,” aligns with a brand‑impersonation campaign targeting Mastercard, as explicitly noted in the intelligence. The domain’s registrar is eNom, LLC, a popular registrar that is frequently used by both legitimate and malicious operators. No additional public threat‑intel feeds are referenced, and the content of the site beyond the title has not been captured, leaving the exact payload or credential‑harvesting mechanism uncertain.

Defenders should block the IP address 107.173.193.235 at network perimeters, add baracct.com to DNS sinkhole lists, and monitor for any residual traffic from the HostPapa AS. Because the site is already offline, incident response teams should focus on detecting any phishing emails or credential submissions that may have been directed to this domain while it was active. Continuous monitoring of eNom‑registered domains for similar naming patterns is recommended to pre‑empt future brand‑impersonation attempts.