bullishdegen[.]name

This domain, bullishdegen.name, is flagged as a high-risk phishing site and remains active as of July 12, 2026. Infrastructure analysis reveals it is registered through Cloudflare, Inc. and uses Cloudflare nameservers (meilani.ns.cloudflare.com and zahir.ns.cloudflare.com). The domain resolves to IP address 198.18.0.205, which is part of AS13335 (Cloudflare, Inc.) and geolocated in the United States. The HTTP response code is 403, indicating access is currently restricted, though the domain itself remains operational. The page title, 'Nur einen Moment…,' suggests a temporary holding or redirect page, though the exact nature of the phishing content is not yet confirmed due to the restricted access. Detection data indicates the domain appears on one security blocklist and is flagged by two out of ninety-five security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority, which does not mitigate the domain's malicious classification. Technologies detected include Cloudflare Browser Insights and HTTP/3, consistent with Cloudflare-hosted infrastructure. The domain's trust score is rated at 0/100, reinforcing its high-risk status. What remains uncertain is the specific target or brand being impersonated, as the page title does not reference a known entity, and no additional context about the phishing campaign is available. The restricted HTTP status (403) prevents further analysis of the site's content or functionality. Defenders should treat this domain as actively malicious and prioritize blocking it at the DNS, IP, and URL levels. Monitoring for changes in HTTP status or additional detections from security vendors is recommended to track its evolution. Given its Cloudflare hosting, takedown efforts may require direct engagement with the provider.