berthenergy-inc[.]biz

The domain berthenergy-inc.biz was registered on March 23, 2026 through Global Domain Group LLC and currently resolves to the IPv4 address 178.32.82.179. Its authoritative name servers are ns3.ddoscure.com and ns4.ddoscure.com. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that threat‑intelligence sources have identified it as malicious. VirusTotal analysis shows that six of ninety‑one scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity.

No additional public intelligence such as page titles, SSL certificate details, or HTTP response codes has been released, leaving the exact content and the targeted brand or service unconfirmed. Infrastructure observations suggest a freshly created domain with a modest hosting footprint, a pattern often associated with short‑lived phishing campaigns. Defenders should treat berthenergy-inc.biz as a high‑risk indicator.

Immediate actions include adding the domain to outbound filtering rules, updating URL and DNS blocklists, and monitoring DNS queries for the associated IP address. Security teams should also review any recent user reports of credential‑submission attempts that could be tied to this host, and consider employing sandbox analysis on any retrieved page content should the site become reachable. Continuous re‑evaluation is advised, as further enrichment—such as page title extraction or SSL fingerprinting—may clarify the phishing payload and the intended victim brand.