sadhovbert-usderk[.]com

Analysis indicates that sadhovbert-usderk.com was registered on February 3 2026 through NameCheap, Inc. The domain resolves to the IP address 172.67.220.235, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain appears on one security blocklist and has been explicitly blocked by PhishDestroy, demonstrating that at least one anti‑phishing service has taken protective action. The Gridinsoft trust score of 0 / 100 further reflects a lack of confidence in the site’s legitimacy. The SSL certificate presented is identified as “WE1,” a generic certificate often observed on disposable or compromised sites.

VirusTotal records show that 15 of 93 scanning engines have flagged the domain, indicating a moderate level of detection across independent security products. An AlienVault OTX pulse references the domain once, confirming that it has been cited in open‑source threat‑intel feeds. The presence on a security blocklist and the 15 detections reported by VirusTotal suggest that the domain has been observed delivering malicious login pages or credential‑harvesting forms, consistent with the generic phishing classification. Because the site is currently offline, automated scanners cannot retrieve HTTP response codes or page titles, and no page‑title information is available in the intelligence feed.

The Cloudflare front‑end may be used to hide the original hosting infrastructure, a common tactic to obscure the true source of phishing traffic. Defenders should continue to block the domain at perimeter and DNS layers, add the associated IP address to network‑wide deny lists, and monitor for any new sub‑domains that resolve to the same Cloudflare edge IPs. Organizations should also consider updating email security gateways to flag messages that reference this domain and to enforce URL rewriting for any click‑through attempts.