cogentonline[.]icu

Analysis shows that cogentonline.icu is an active domain used for generic phishing. The site is hosted behind Cloudflare, resolving to IP 188.114.96.3 located in Canada and served by the nameservers chance.ns.cloudflare.com and martha.ns.cloudflare.com. TLS is provided by a Google Trust Services / WE1 certificate, indicating a valid SSL chain but not confirming legitimacy of the content. An HTTP 403 response is returned and the only visible page title is "Just a moment...", which is typical of Cloudflare challenge pages and provides no insight into the payload. VirusTotal scans have flagged the domain by 5 of 91 security vendors, and the domain is listed on at least one public blocklist and has been blocked by PhishDestroy. AlienVault OTX includes the domain in two threat‑intel pulses, reinforcing its reputation as malicious. Registration information lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. While the infrastructure appears legitimate, the combination of vendor detections, blocklist presence, and OTX references indicates a high‑risk phishing operation. Defenders should add cogentonline.icu to outbound and inbound deny lists, monitor DNS queries for the domain, and enforce web‑filter policies to block user access. Continuous re‑evaluation is advised in case the hosting or content changes, but current evidence supports immediate mitigation.