barkingpuppy[.]top

Analysis of the domain barkingpuppy.top indicates active generic phishing infrastructure as of July 12, 2026. The domain was registered on March 2, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 104.21.95.252, which is hosted on AS13335 belonging to Cloudflare, Inc. The SSL certificate is issued by Let's Encrypt, and the domain is served over HTTP/3 with Cloudflare and Cloudflare Browser Insights detected as underlying technologies. The HTTP response status is 403, and the page title displayed is 'Just a moment...', which is consistent with intermediate or cloaked phishing pages awaiting user interaction or redirection. The domain appears on three security blocklists, and three out of ninety-five security vendors on VirusTotal have flagged it as malicious. The nameservers kay.ns.cloudflare.com and trey.ns.cloudflare.com further confirm Cloudflare as the DNS provider. While the exact content or target of the phishing campaign remains unconfirmed due to the 403 status and lack of visible page data, the classification as 'generic phishing' suggests broad, non-brand-specific credential harvesting or fraudulent activity. No specific brand, login form, or scam subtype has been identified in the available data. Defenders should treat this domain as high-risk due to its recent registration, Cloudflare-based hosting, and presence on multiple blocklists. Network-level blocking of 104.21.95.252 and barkingpuppy.top is recommended, along with monitoring for connections to this domain or IP in proxy, DNS, and endpoint logs. The domain's use of Cloudflare may complicate takedown efforts, but reporting to the registrar and certificate authority may assist in mitigation. Further analysis of related domains or IPs may reveal additional infrastructure linked to this campaign.