bbllp[.]network

Analysis of bbllp.network indicates an active generic phishing infrastructure. The domain was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently hosted behind Cloudflare (AS13335) with the IP address 104.21.112.1. The site serves over HTTP/3 and presents a Cloudflare challenge page titled "Just a moment..." while returning an HTTP 403 status code, suggesting that access is being intentionally blocked. The SSL certificate is issued by Google Trust Services / WE1, confirming a valid TLS layer. Reputation data shows a Gridinsoft trust score of 0/100 and the domain appears on one security blocklist. Two of ninety‑three VirusTotal scanners have flagged the domain, and it is listed as blocked by PhishDestroy. Nameservers earl.ns.cloudflare.com and melody.ns.cloudflare.com resolve the domain, consistent with the Cloudflare front‑end. While the exact phishing payload or targeted brand has not been disclosed, the combination of recent registration, low trust score, and detection by multiple security vendors supports a high‑risk classification. Defenders should add bbllp.network to URL and DNS blocklists, monitor for any resolution changes, and consider sinkholing the associated IP range if feasible. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to this infrastructure.