bullishdegen[.]org

The domain bullishdegen.org was registered on November 21, 2025 through NiceNIC International Group Co., Limited and is currently taken offline. Technical analysis shows the domain resolves to the IPv6 address 2606:4700:3035::ac43:aca9, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented, and the HTTP response returns the generic page title "Just a moment...". The site is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filter.

Reputation services assign extremely low trust scores: Scamadviser reports a score of 1 out of 100, and Gridinsoft also records a score of 1 out of 100. VirusTotal analysis indicates that five of ninety‑five scanning engines flagged the domain, confirming malicious intent despite the limited detection count. Nameserver configuration uses Cloudflare’s authoritative servers (art.ns.cloudflare.com and melany.ns.cloudflare.com).

While the available data confirms the domain’s phishing nature, details such as the specific payload, targeted brand, or phishing kit remain unknown because the page content has not been captured. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and add the IPv6 address to existing threat‑intel feeds. Ongoing observation of Cloudflare‑associated IP ranges for similar patterns is recommended, as is periodic re‑query of VirusTotal and other reputation services to capture any new detections.