layerbrettt[.]com

Analysis indicates that the domain layerbrettt.com is currently active and has been observed serving a site with the title “VPSSIM - Website chưa có SSL hợp lệ”. The domain was registered on September 12, 2025 through NameCheap, Inc. and resolves to the Cloudflare edge address 104.21.65.73, which belongs to AS13335 (Cloudflare, Inc.) located in the United States. DNS resolution uses the Cloudflare authoritative name servers blair.ns.cloudflare.com and langston.ns.cloudflare.com, confirming that the infrastructure is protected behind Cloudflare’s CDN and HTTP/3 stack. An HTTP 525 response (“SSL Handshake Failed”) is returned, and the presented certificate is issued by Google Trust Services under the “WE1” label, suggesting that the TLS termination is performed by Cloudflare rather than the underlying web server.

The domain appears on a single security blocklist, PhishDestroy, which has flagged it as malicious. VirusTotal has identified one positive detection out of 95 scanned vendors, reinforcing the suspicion of abuse. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious activity. No additional threat intelligence sources such as OTX or Safe Browsing references are provided, and the page content beyond the title has not been publicly disclosed, leaving the exact phishing payload or target brand undefined.

Given the combination of a recent registration date, use of a reputable CDN for concealment, a mismatched SSL handshake error, and the presence on a phishing blocklist, defenders should treat layerbrettt.com as a high‑risk indicator. Network defenders are advised to block DNS resolution and HTTP traffic to the IP 104.21.65.73, add the domain to local blocklists, and monitor for any outbound connections that may attempt to contact the site.