brainedcorednod-ki[.]de

Analysis indicates that the domain brainedcorednod-ki.de was registered on 21 February 2026 and is currently offline. DNS resolution points to the Cloudflare‑owned address 172.67.164.23, belonging to AS13335 in the United States. The domain is served through Cloudflare with HSTS enabled, HTTP/3 support, and includes Google Analytics and Cloudflare Browser Insights scripts, suggesting a typical hosting configuration rather than a dedicated malicious infrastructure. The SSL certificate is issued by Google Trust Services under the WE1 intermediate, confirming a valid TLS chain. Page metadata reveals the title “BrainedCoredNod™ - KI‑Trading Deutschland 2026”, and the listed scam type is brand impersonation targeting Binance.

The domain appears on three public blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show four of ninety‑five AV engines flagging the domain, and AlienVault OTX cites it in a single threat‑intel pulse. Gridinsoft assigns a trust score of zero, reinforcing the malicious assessment. Nameservers coby.ns.cloudflare.com and marjory.ns.cloudflare.com are standard Cloudflare entries.

Uncertainty remains regarding the specific content hosted before takedown, as no page capture is available and the offline status prevents direct verification of phishing pages or credential harvesting mechanisms. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and add the associated IP address to whitelist exclusions only after thorough validation. Threat‑intel feeds should be updated to reflect the domain’s inclusion in existing blocklists, and security teams handling Binance‑related traffic should treat any connections to this host as malicious. Ongoing observation of Cloudflare‑originated IP ranges for similar brand‑impersonation patterns is recommended.