brandrancegradess[.]com

On 25 October 2024 the domain brandrancegradess.com was registered through Cosmotown, Inc. The authoritative nameservers are dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com and dns4.lytehosting.com. The domain resolves to the IPv4 address 163.61.188.5, which belongs to AS153568 NEW DHAKA HARDWARE and is geolocated in the United States. No TLS certificate is present, indicating the site is served over plain HTTP only. The page title returned by the server is “brandrancegradess.com”, and the site is classified as a brand‑impersonation scam targeting the “base” brand.

Security telemetry shows the domain appears on a single blocklist and has been explicitly blocked by PhishDestroy. The Gridinsoft trust score for the host is 0 out of 100, reflecting an extremely low reputation. VirusTotal has processed the domain with 95 scanning engines, none of which have raised a detection at the time of analysis; this lack of detection does not imply benign behavior. The domain is currently offline, which may be a temporary takedown or a deliberate cessation of activity.

Evidence gaps include the absence of a live HTTP response, lack of SSL/TLS negotiation data, and no publicly available samples of the phishing content. Analysts are advised to continue monitoring the associated IP address and nameserver infrastructure for re‑activation, to add the domain to internal blocklists, and to share indicators of compromise with upstream threat‑intelligence feeds. Defensive actions should also include configuring web proxies to block clear‑text traffic to the IP and to enforce HTTPS‑only policies where possible.