Dagmaar.com flagged as high-risk generic phishing domain

Dagmaar.com has been identified as an active high-risk generic phishing domain. The domain was registered through Tucows Domains Inc. on May 14, 2026, and is currently still active. Analysis indicates that the domain is associated with a page titled 'Dagmaar – exclusive silk scarves,' which may be attempting to lure users into a phishing scheme. The domain is hosted on nameservers ns1.afraid.org, ns2.afraid.org, and ns3.afraid.org, and resolves to the IP address 169.47.130.72, which is located in the United States and is managed by SoftLayer Technologies, Inc. Notably, the domain does not have an SSL certificate, which can be a red flag for users who might be wary of submitting sensitive information. Security vendors such as PhishDestroy, MetaMask, and SEAL have blocked this domain, and it appears on three security blocklists. While only one of 95 security vendors on VirusTotal has flagged this domain, the presence on multiple blocklists and its current active status suggest that it poses a significant threat. Given the high risk level and active status, defenders are advised to monitor traffic to this domain closely and consider implementing additional security measures to prevent potential phishing attacks. The exact content and nature of the site have not yet been fully analyzed, but the available evidence points to a need for heightened vigilance.