brandlylabs[.]com

Analysis of the domain brandlylabs.com indicates it was registered on February 23, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 188.114.97.3, which is part of AS13335 (Cloudflare, Inc.) and geolocated in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (dina.ns.cloudflare.com and eoin.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. No SSL certificate was detected, increasing the likelihood of interception or manipulation of unencrypted traffic.

The page title, 'Brandly - Create Perfect Collaborations,' suggests an attempt to impersonate Brandly, a legitimate collaboration and branding platform. This aligns with Google Safe Browsing's classification of the domain as engaging in social engineering, a hallmark of phishing activity. As of the report date, the domain appears on one security blocklist (PhishDestroy) and is flagged by 10 of 93 security vendors on VirusTotal, indicating moderate but not universal detection. The domain's current status is offline, though this does not preclude future reactivation or migration to alternative infrastructure.

Defenders should treat this domain as high-risk due to its registration context, Cloudflare-based hosting, absence of encryption, and confirmed blocklist presence. While the exact phishing kit or payload remains unanalyzed, the combination of impersonation targeting and social engineering flags warrants inclusion in threat intelligence feeds and endpoint protection rules. Organizations using Brandly or similar collaboration tools should monitor for credential harvesting attempts linked to this domain and educate users on recognizing phishing indicators. Further investigation into the registrar's historical associations with malicious domains may provide additional context for proactive mitigation.