soudeurperf[.]com

Analysis of soudeurperf.com indicates that the domain is currently active and has been flagged by the PhishDestroy blocklist. The domain was registered through OVH SAS on October 13, 2022, and is hosted on the IP address 188.114.97.3. DNS resolution is delegated to Cloudflare name servers damiete.ns.cloudflare.com and naya.ns.cloudflare.com, a configuration commonly used to obscure the true hosting environment.

The domain appears on a single security blocklist, reinforcing the suspicion of malicious intent. VirusTotal records show that the site was scanned by 95 independent scanning engines, none of which returned a detection at the time of the scan; this absence of detections does not constitute a safety assurance, as threat actors frequently employ evasion techniques. No public Safe Browsing, OTX, or SSL certificate details have been disclosed, and the page title or content has not been publicly analysed, leaving the exact phishing lure undefined.

The combination of recent registration, use of reputable registrar services, Cloudflare front‑end, and inclusion on a phishing‑focused blocklist suggests a deliberate attempt to host a credential‑harvesting or impersonation campaign. Defenders should continue to monitor DNS queries for the domain, enforce blocklist rules that include soudeurperf.com, and consider adding the IP address 188.114.97.3 to network‑level deny lists. Endpoint protection solutions should be updated to flag any URLs containing the domain, and security teams should treat any email or web traffic referencing soudeurperf.com as potentially malicious until further forensic analysis clarifies the payload.