doggocto[.]com

The domain doggocto.com was registered on 21 February 2026 through MAT BAO CORPORATION. It is currently flagged as a generic phishing site with a high risk rating. The public web server returns HTTP 403 and presents a page with the title “Just a moment…”, a pattern commonly used by malicious actors to hide the actual payload behind a Cloudflare challenge page.

Infrastructure analysis shows the domain resolves to IP 172.67.142.64, which belongs to AS13335 operated by Cloudflare. The SSL certificate is issued by Google Trust Services under the WE1 profile, confirming the use of a valid TLS termination at the edge. MX records point to mx1.privateemail.com and mx2.privateemail.com, suggesting the domain is also capable of receiving email, a typical vector for credential‑stealing campaigns. The nameservers elaine.ns.cloudflare.com and khalid.ns.cloudflare.com further confirm reliance on Cloudflare DNS.

Reputation signals are mixed but lean toward malicious. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports two out of ninety‑five scanners flagging the domain, indicating limited but present detection. The Gridinsoft trust score of 25/100 is low, and the site’s technology fingerprint includes Cloudflare Browser Insights and HTTP/3, both of which are frequently leveraged to obscure traffic characteristics.

Given the high‑risk classification, defenders should treat any email or web interaction with doggocto.com as hostile. Immediate actions include adding the domain and its resolved IP address to blocklists, configuring web proxies to drop HTTP 403 responses from this host, and monitoring for any outbound connections to the associated MX hosts. Continuous threat‑intel feeds should be consulted for updates, and any observed credential submissions should be investigated for possible compromise.