sdogg[.]us

Analysis of sdogg.us shows a high‑risk malicious infrastructure that is actively serving a phishing page titled "Sdogg: Elon Musk’s Official Crypto Casino Powered by Blockchain". The domain was registered on February 21, 2026 and resolves to the Cloudflare address 104.21.58.143, belonging to ASN 13335 in the United States. The site presents a valid TLS certificate from Let’s Encrypt (R13), which does not mitigate the underlying threat. HTTP requests return a 200 status, indicating the page is reachable.

Security telemetry indicates that 16 of 95 VirusTotal scanners have flagged the domain, and it appears on one external blocklist. The phishing kit identified is the Gambler Scam, and the scam type is classified as a Crypto Scam, suggesting attempts to lure victims into fraudulent cryptocurrency gambling operations. PhishDestroy has already blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The authoritative nameservers ns15.abovedomains.com and ns16.abovedomains.com are publicly listed, confirming the domain’s DNS configuration.

While the page content has not been manually inspected, the combination of a brand‑leveraging title, a known scam kit, and multiple vendor detections provides strong evidence of a credential‑harvesting or financial‑theft operation targeting users interested in cryptocurrency or Elon Musk‑related promotions. Defenders should add sdogg.us to outbound and inbound blocklists, monitor DNS queries for the listed nameservers, and enforce web filtering rules that deny access to the resolved IP address. Incident response teams should also consider hunting for related indicators such as the Let’s Encrypt certificate fingerprint and the Cloudflare IP range, and isolate any internal hosts that have communicated with the domain since its creation date. Continued observation is advised, as the threat actor may adapt the site or deploy additional infrastructure under the same registrar.