brightonbitcore[.]digital

The domain brightonbitcore.digital was registered on July 22, 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and is hosted on a single authoritative nameserver. It resolves to IPv4 address 45.9.148.217, which is announced by AS49447 (Nice IT Services Group Inc.) and geolocated to the Netherlands. The site presents a valid‑looking TLS certificate issued by Google Trust Services with the WE1 intermediate, providing a credible HTTPS appearance. An HTTP request returns status code 200 and the page title reported is “Jackson Template,” but the page content has not been disclosed in the current intelligence.

Infrastructure analysis indicates the domain is fronted by Cloudflare and negotiates HTTP/3, suggesting CDN use for traffic concealment. The domain is listed on one security blocklist and has been flagged by PhishDestroy as still active. VirusTotal scans show 2 of 95 security vendors flagging the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high‑risk classification.

The domain is explicitly categorized as a brand‑impersonation of Google. No further details about credential‑harvesting pages or payloads are available, leaving the exact malicious behavior uncertain.

Defenders should block or sinkhole DNS queries for brightonbitcore.digital and any traffic to 45.9.148.217, add the domain to URL filtering and email security policies, and monitor for new domains registered with the same registrar or hosting provider. Ongoing re‑scanning with multi‑engine services is recommended to capture any evolving malicious components.