bro-cas1[.]com

The domain bro-cas1.com was registered on April 24, 2026 through Fewmoretaps OU d/b/a Trustname.com. Gridinsoft assigns it a trust score of 0/100, indicating a high likelihood of malicious use. AlienVault OTX has referenced the domain in eight separate threat‑intelligence pulses, and it appears on one public blocklist (PhishDestroy). DNS resolution points to IP 193.233.15.95, which is hosted by the Safe Value Limited infrastructure. The web server returns an HTTP 302 redirect and presents a TLS certificate issued by Let’s Encrypt (YR1). VirusTotal scans show two of 91 AV engines flag the domain, reinforcing the suspicion. The page title observed is “BroCas - онлайн казино, где всё по‑честному | Забирай свой бонус!”, suggesting a Russian‑language online casino lure. The combination of a recent registration, zero trust score, multiple OTX mentions, active blocklisting, and the presence of a phishing‑type title supports classification as a generic phishing operation targeting users interested in online gambling. No additional content analysis is available, so the exact payload or credential‑collection mechanism remains unknown. Defenders should treat the domain as hostile: add it to URL filtering and sinkhole lists, monitor outbound connections to the associated IP, and consider blocking the IP range used by Safe Value Limited. Ongoing observation of any new intelligence, especially changes in the page content or additional AV detections, is recommended.