dsgdd124[.]com

Analysis of dsgdd124.com shows it is an active credential‑phishing site first observed after its registration on 30 April 2026 through NameSilo. The domain resolves to the Cloudflare edge address 172.67.211.88 and uses Cloudflare nameservers lars.ns.cloudflare.com and martha.ns.cloudflare.com. TLS is provided by a Let’s Encrypt certificate (E7). Web‑application fingerprints include Vue.js, Swiper, jQuery and assets served from cdnjs, with Cloudflare Browser Insights and HTTP/3 enabled. The site returns HTTP 521, indicating that Cloudflare is currently denying traffic, but the underlying host remains reachable. Reputation services assign a Gridinsoft trust score of 0/100 and the domain appears on one public blocklist; PhishDestroy has already listed it. VirusTotal records show 2 of 91 scanners flagging the domain, reinforcing its malicious classification. The only explicit indicator of intent is the “Credential Phishing” label, and the page title returned is “UZUM”, which provides no further context. Because the infrastructure is fully hosted behind Cloudflare, the attacker can quickly relocate the payload while preserving the same domain name. Defenders should add dsgdd124.com to network‑level blocklists, enforce DNS filtering, and monitor for any associated IP or certificate changes. Email security gateways should treat any messages containing this domain as malicious, and incident response teams should advise users to avoid providing credentials to any site using this URL.