dbencrypt[.]us

The domain dbencrypt.us was registered on February 21, 2026 through GoDaddy and is currently listed as active with a high risk rating. It is classified as a generic phishing site targeting credential harvesting. The page title returned by the server is “Secure What’s Next | LevelBlue”, and the site issues an HTTP 301 redirect to its final landing page. Infrastructure analysis shows the domain resolves to IP 199.60.103.254, which is hosted in the United States and belongs to ASN 209242 owned by Cloudflare London, LLC. Authoritative name servers are ns53.domaincontrol.com and ns54.domaincontrol.com. The TLS certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, indicating a standard commercial certificate without anomalous extensions. Reputation data indicates the site has been observed in one AlienVault OTX pulse and appears on a single security blocklist. PhishDestroy has already blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal scans show that 3 of 95 security vendors flag the domain as malicious, reinforcing the high‑risk assessment. Defenders should treat dbencrypt.us as hostile. Immediate actions include adding the domain to outbound and inbound firewall deny lists, updating DNS filtering policies, and monitoring for any connections to the associated IP address. Because the specific victim brand or lure content has not been disclosed, continuous threat‑intel feeds should be consulted for any emerging indicators of compromise related to this infrastructure.