cy-bro[.]live

Analysis indicates that the domain cy-bro.live was registered on 2026-03-02 through NiceNIC International Group Co., Limited and currently resolves to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). The site returns an HTTP 301 redirect and presents a TLS certificate issued by Let’s Encrypt (CN=E8). DNS resolution is served by Cloudflare name servers chan.ns.cloudflare.com and arvind.ns.cloudflare.com, and the web server advertises HSTS and HTTP/3 support. The page title “CYBRO - Smart Hub for Liquidity Providers | Uniswap V3” and the declared brand target of Uniswap demonstrate a clear brand‑impersonation attempt aimed at cryptocurrency users. VirusTotal scans show four of ninety‑three security vendors flagging the domain, and it is listed on a single external blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The campaign remains active as of the report date. While the exact phishing page content has not been examined, the observed infrastructure and branding strongly suggest a crypto‑related scam. Defenders should block the domain at DNS and network layers, monitor for related C2 infrastructure, and update detection rules to include the observed IP address, certificate fingerprint, and the specific page title string. Continuous re‑scanning is advised to capture any changes in vendor detections.