brioluxerise-es[.]com

Analysis of brioluxerise-es.com shows a newly registered domain created on 21 February 2026 that was used to host a brand‑impersonation site targeting the brand identified as "base". The site resolved to IP address 104.21.79.249, which belongs to AS13335 Cloudflare, Inc., placing the hosting infrastructure in the United States. Registration was performed through Name SRS AB, and the domain is served by the Cloudflare nameservers brynne.ns.cloudflare.com and gabriel.ns.cloudflare.com. No TLS certificate was observed, indicating the site operated over plain HTTP, a factor that could facilitate man‑in‑the‑middle interception or credential harvesting.

The page title retrieved from the site, "Brío Luxerise - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas", suggests a financial‑oriented narrative, but no further content analysis is available because the site is currently taken offline. VirusTotal recorded a single positive detection out of 93 scanning engines, confirming that at least one security product identified malicious characteristics. The domain appears in one AlienVault OTX pulse and is listed on a single public blocklist, with PhishDestroy confirming the block. Reputation services assign extremely low trust scores (Scamadviser 1/100, Gridinsoft 0/100), reinforcing the assessment of a high‑risk phishing operation.

Uncertainties remain regarding the exact payload delivered, the specific phishing kit employed, and whether the site ever presented login forms or credential‑stealing scripts, as no live HTTP response or content sample could be captured. Defenders should proactively block brioluxerise-es.com at perimeter firewalls and proxy filters, monitor DNS queries for the domain and its associated Cloudflare IP range, and add the domain to internal threat‑intel feeds. Continuous observation of newly registered domains using the same registrar or nameserver pattern is advised, as attackers may recycle similar infrastructure for future campaigns.