getbedrock[.]org

The domain getbedrock.org was registered on February 21, 2026 through Tucows Domains Inc. and is currently classified as a high‑risk generic phishing site. It resolves to the IP address 209.94.90.1, which belongs to AS40680 operated by Protocol Labs in the United States. The site is served behind Cloudflare, utilizes HTTP/3, and presents a valid SSL certificate issued by Google Trust Services under the WE1 label, indicating that transport encryption is correctly configured.

Infrastructure analysis reveals that the domain relies on Cloudflare nameservers marlowe.ns.cloudflare.com and skip.ns.cloudflare.com, confirming the use of a reputable CDN provider. The hosting IP is associated with a Cloudflare edge node, and the presence of HTTP/3 suggests modern protocol support. No additional hosting details have been disclosed, and the content of the web page beyond the title "Bedrock DAO" has not been publicly examined.

Reputation signals are strong: the domain has a Gridinsoft trust score of 0 out of 100, appears on two security blocklists (PhishDestroy and ScamSniffer), and three out of ninety‑five VirusTotal scanners have flagged it as malicious. The HTTP response code is 200, indicating that the site is actively serving content. These indicators collectively reinforce the high‑risk assessment and the active status of the phishing operation.

Defenders should immediately block getbedrock.org at DNS and proxy layers, and include the associated IP address 209.94.90.1 in network‑level deny lists. Continuous monitoring of Cloudflare edge IP ranges for any shift in hosting location is advised, as the attacker could pivot to additional nodes. Organizations should also update email security gateways to flag any communications referencing "Bedrock DAO" to mitigate credential‑harvesting attempts originating from this infrastructure.