bnbramadanlotary[.]com

Analysis of bnbramadanlotary.com indicates that the domain is currently offline and has been taken down by the PhishDestroy blocklist. The domain resolves to the IP address 188.114.97.3, which is hosted within Cloudflare’s network (AS13335) and geolocated to the United States. The registration record shows creation on 27 February 2026 through NiceNIC International Group Co., Limited, and the domain is served by Cloudflare’s authoritative nameservers damien.ns.cloudflare.com and summer.ns.cloudflare.com. No TLS certificate was observed; the site was reachable only over HTTP, and the page title returned was “Just a moment…”, offering no further context about the hosted content.

Threat intelligence classifies the site as “Crypto Scam”. Supporting evidence includes a Gridinsoft trust score of 0 out of 100 and a listing on a single security blocklist. VirusTotal scanned the domain and recorded detections from 2 of 93 security vendors, confirming that at least a small subset of scanners consider the domain malicious. The lack of a valid SSL certificate, combined with the low trust score and the presence on a blocklist, reinforces the malicious assessment.

Uncertainties remain regarding the specific payload or victim interaction flow, as the page content was not captured and no additional indicators such as malware hashes, command‑and‑control endpoints, or phishing templates have been disclosed. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any residual traffic to 188.114.97.3, and update internal threat feeds with the observed indicators. Given the recent registration date, the domain may be part of a broader short‑lived campaign; therefore, periodic re‑evaluation of related Cloudflare‑hosted IP ranges and associated newly registered domains is advised.