barrestabinoer[.]com

Analysis indicates that the domain barrestabinoer.com was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 172.67.173.200, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site presented an SSL certificate identified as WE1, suggesting a valid TLS handshake was in place when the site was active. The page title returned by the server was "Phantom: The crypto wallet for everyone," a content string that does not reference the targeted brand but reveals a possible attempt to lure victims with a cryptocurrency narrative. The domain is listed on a single security blocklist and has been tagged by the PhishDestroy blocklist, confirming that at least one defensive feed has flagged it.

VirusTotal scans show that five out of ninety‑three security vendors flagged the domain, indicating a moderate level of detection across AV engines. The threat classification is recorded as "Social Media Phishing" with the specific target identified as Instagram. No further public indicators such as additional blocklist appearances, Safe Browsing reports, or OTX tags are present in the supplied data. Uncertainty remains around the exact phishing kit or page layout because the only observable artifact is the page title; no screenshots, login forms, or credential‑harvesting URLs have been disclosed.

The limited number of blocklist entries and the modest VirusTotal detection count suggest that the infrastructure may be short‑lived or not widely distributed, yet the use of Cloudflare’s network provides resilience against takedown attempts. Defenders should add barrestabinoer.com to internal block and allow lists, monitor for any resolution changes, and ensure that URL filtering solutions reference both the domain and its associated IP address.