emdoge[.]co

emdoge.co is currently flagged as an active generic phishing site. The domain was registered on February 21, 2026 through Dynadot LLC and resolves to the Amazon-owned IP address 207.174.61.1 (AS16509, United States). HTTP requests return status code 200 and the TLS certificate is issued by Let’s Encrypt (E7). The page title returned by the server is "Fraud detected", which aligns with the classification of the site as a fraud‑related phishing vector.

Reputation services show extreme distrust: Gridinsoft assigns a trust score of 0 out of 100 and the domain appears on at least one public blocklist. PhishDestroy has already blocked the domain, and two AlienVault OTX pulses reference it. VirusTotal analysis reports that nine of ninety‑three scanning engines flagged the domain, indicating a non‑trivial detection rate. The authoritative name servers are ns1.dyna-ns.net and ns2.dyna-ns.net, both associated with Dynadot’s DNS infrastructure.

The combination of a newly created domain, low‑cost registrar, Amazon hosting, and a Let’s Encrypt certificate is consistent with rapid‑deployment phishing campaigns. Uncertainty remains regarding the specific payload or credential‑harvesting page because only the page title is available; no content or target brand has been disclosed. Defenders should continue to block the domain at perimeter and DNS layers, monitor for additional resolutions to the same IP, and include the domain and its IP in threat‑intel feeds. Ongoing observation of the two OTX pulses and any future VirusTotal scans is recommended to assess changes in detection coverage.