bsdtgm[.]com

bsdtgm.com was observed as a phishing infrastructure targeting users through a brand impersonation campaign. The domain was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IP address 172.67.164.55, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The hosting arrangement under Cloudflare suggests the operator leveraged a reputable CDN to obscure the true backend location. The site presented the page title “trade_web”, but no further content analysis is available.

SSL termination is provided by a certificate identified as “WE1”, indicating a standard TLS layer without additional validation details. Threat intelligence sources confirm the malicious nature of the domain. AlienVault OTX includes bsdtgm.com in a single pulse, and the domain is listed on one public blocklist. PhishDestroy has actively blocked the domain, and five of ninety‑five VirusTotal scanners have raised alerts, demonstrating partial detection across the security ecosystem. The limited number of detections may reflect the brief operational window between registration and takedown.

Uncertainty remains regarding the specific brand being impersonated and the exact phishing vector employed, as the page title alone does not disclose the targeted entity. No public information about the registrar is supplied, and no additional artifacts such as phishing kits or payload hashes have been disclosed. Defenders should continue to monitor the IP address 172.67.164.55 and associated Cloudflare ASN for any resurgence of malicious activity. Updating web filtering and DNS blocklists with the domain and its IP is advisable. Given the partial VirusTotal detections, security teams should consider adding the domain to internal watchlists and employing heuristic analysis of outbound traffic to detect potential credential harvesting attempts linked to similar brand‑impersonation campaigns.