dodocaz[.]xyz

Analysis of the domain dodocaz.xyz shows that it was registered on July 29, 2026 through Global Domain Group LLC and is currently using Cloudflare nameservers kim.ns.cloudflare.com and peter.ns.cloudflare.com. DNS resolution points to the address 104.21.59.190, indicating that the site is hosted on a Cloudflare‑proxied network. The domain appears on one public security blocklist and has been actively blocked by the PhishDestroy feed, confirming that threat‑intel sources have observed malicious use.

VirusTotal records indicate the domain has been submitted to 91 scanning engines, none of which have raised a detection at the time of analysis; this absence of detections does not imply safety and should be interpreted as a lack of current signature coverage. No additional metadata such as SSL certificate details, HTTP response codes, page title, or brand impersonation is available in the current intelligence set, leaving the exact phishing campaign content unverified. The infrastructure is still active, and the domain continues to resolve to the same IP address, suggesting that the operators maintain the site for ongoing abuse.

Defenders should prioritize adding dodocaz.xyz to local deny‑list rules, enforce outbound filtering for connections to the associated IP, and monitor Cloudflare‑associated traffic for anomalous patterns. Continuous re‑scanning with sandbox services and periodic checks against newly published blocklists are recommended to capture any evolution of the threat, including potential brand‑spoofing pages that may appear later.