sdbulliom[.]com

Analysis of sdbulliom.com as of July 28, 2026 shows that the domain is actively used in a generic phishing campaign and is classified as high risk. The domain resolves to the authoritative name servers 581.ns1.abovedomains.com and 581.ns2.abovedomains.com, which are hosted by the provider Abovedomains. Registration records indicate that the domain was registered through Chengdu Fly-Digital Technology Co., Ltd., a registrar commonly observed in malicious infrastructure. HTTP probing returns a 200 OK status, confirming that a web service is reachable.

VirusTotal scans have flagged the domain in 13 of 91 participating security vendors, demonstrating a consensus of malicious detection across multiple engines. The domain appears on one public security blocklist and is specifically listed by the PhishDestroy feed, reinforcing its presence in community‑maintained threat intelligence. Current intelligence does not provide concrete IP address, geographic, or TLS certificate details, leaving the underlying hosting environment uncharacterized. Likewise, no page title or content snapshot is available, so the exact lure employed by the site cannot be described.

Defenders should continue to block sdbulliom.com at network perimeter controls, DNS filtering, and endpoint protection layers. Monitoring for newly observed IPs associated with the abovedomains name servers is advised, as well as periodic re‑scanning to capture any changes in detection scores. Because the domain remains active, organizations should treat any traffic to it as potentially malicious and enforce strict user awareness policies to reduce exposure to credential‑stealing attempts.