dovevip[.]cc

The domain dovevip.cc is currently assessed as a high-risk generic phishing threat based on multiple technical indicators. Registered through NameSilo, LLC on December 25, 2025, the domain remains active as of July 23, 2026. DNS records show that it resolves to IP address 188.114.97.3 and utilizes Cloudflare nameservers (kolton.ns.cloudflare.com and violet.ns.cloudflare.com), which can be indicative of attempts to obscure hosting details or leverage protection features common among phishing infrastructure operators.

Detection data from VirusTotal reveals that 13 out of 95 security vendors have flagged dovevip.cc for malicious or phishing-related activity. This detection rate, while not universal, demonstrates significant consensus among threat intelligence vendors regarding the domain’s risk profile. Additionally, dovevip.cc has been actively blocked by the PhishDestroy security blocklist, further confirming its association with phishing operations. The domain’s presence on at least one major blocklist and its ongoing resolution to a live IP indicate that it remains a potential threat to users and organizations.

No additional context is available regarding the specific content or targeted brands associated with this domain, as there is no evidence from page titles or other on-page data. The lack of such detail means the exact nature of the phishing scheme hosted at dovevip.cc is not yet analyzed. Defenders should treat all traffic to this domain as high risk, implement immediate blocking at network and endpoint layers, and monitor for any related indicators of compromise. Further investigation is recommended if evidence of user interaction with this domain is detected.