watchdoors[.]network

watchdoors.network is currently active and classified as a generic_phishing site with a high risk rating. The domain resolves to the Cloudflare edge IP 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. DNS resolution uses the Cloudflare‑provided authoritative nameservers mei­lani.ns.cloudflare.com and zahir.ns.cloudflare.com, indicating the domain is fully hosted behind Cloudflare’s CDN and WAF. The site presents an HTTP/3 enabled service and returns HTTP 403 for the root request, while the TLS certificate is issued by Google Trust Services under the WE1 label, confirming a valid HTTPS endpoint. The page title observed is “Nur einen Moment…”, but no further page content has been captured. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy. VirusTotal analysis shows that 8 of 95 scanning engines have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. These indicators collectively suggest malicious use consistent with phishing campaigns. Defenders should consider adding watchdoors.network to deny‑list rules at the DNS and proxy layers, monitor outbound connections to the associated IP, and enforce TLS inspection to capture any hidden payload. Continuous re‑evaluation is advised, as the site remains active and may evolve its payload or hosting configuration.