dogsabordo[.]com[.]br

Analysis of the domain dogsabordo.com.br indicates active phishing infrastructure targeting DKB, a financial services brand. The domain was registered on February 21, 2026, through NEWFOLD and currently resolves to IP address 104.21.22.174. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Yoast SEO, jQuery Migrate, jQuery, and Cloudflare services, including Cloudflare Browser Insights. The site's page title, 'Home page - Dogs à Bordo,' does not directly reference DKB, but threat intelligence sources explicitly classify this domain as a DKB impersonation attempt. The domain appears on two security blocklists and is flagged by 13 of 95 security vendors in VirusTotal scans. AlienVault OTX records show the domain in 26 threat intelligence pulses, further corroborating its malicious classification. Gridinsoft assigns a trust score of 0/100, and the domain is actively blocked by PhishDestroy and BLP-Malware. The site remains operational as of July 12, 2026, with a Let's Encrypt SSL certificate in place, which may lend a false sense of legitimacy to potential victims. Defenders should treat this domain as high-risk phishing infrastructure. Network-level blocking of 104.21.22.174 and dogsabordo.com.br is recommended. Given the domain's registration recency and ongoing activity, monitoring for related domains registered through the same registrar or resolving to the same IP may help identify additional threats. The exact phishing kit or lure mechanism is not yet analyzed, but the consistent classification across multiple threat intelligence sources confirms its malicious intent.