fix-brevis[.]network

Analysis of the domain fix-brevis.network indicates that it was registered on February 21, 2026 and is hosted behind Cloudflare’s network (AS13335) with the IP address 172.67.204.219 located in the United States. The site presented a page titled "Brevis Claim Portal" and was classified as a crypto scam. VirusTotal scans show that four of ninety‑five security vendors flagged the domain as malicious, confirming that at least a subset of scanners identified suspicious behavior.

The domain is listed on five public blocklists—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—and appears in a single AlienVault OTX pulse, reinforcing the consensus that the infrastructure is being used for illicit activity. An SSL certificate labeled WE1 was observed, but the certificate alone does not mitigate the risk associated with the underlying content. As of the report date, July 24, 2026, the site is reported offline, which may be a temporary takedown or an intentional shutdown by the operators.

Defenders should continue to block the domain at network perimeter devices and update any URL filtering policies to include the listed blocklists. Incident response teams should monitor for related C2 infrastructure that may reuse the same Cloudflare IP range, and threat‑intel analysts should correlate any future sightings of the page title or similar claim‑portal terminology with existing crypto‑scam campaigns. Because the domain’s current offline status prevents real‑time content inspection, further investigation is limited to the observed metadata; any additional indicators—such as payload hashes or phishing kit fingerprints—remain unknown at this time.