# dododoex.finance — SUSPICIOUS

> Warning: dododoex.finance is a medium-risk phishing site currently offline. Avoid interacting with this domain to protect your credentials.

## Summary
PhishDestroy identifies dododoex.finance as a medium-risk generic phishing domain designed to deceive users. The domain’s intent appears to involve fraudulent activities typical of phishing campaigns, including potentially harvesting sensitive user credentials or financial data.

Evidence supporting this classification includes the domain’s recent registration date of February 21, 2026, and its resolution to the IP address 188.114.97.3. It is registered through NiceNIC International Group Co., Limited and has been flagged on one security blocklist. VirusTotal analysis shows that 4 out of 95 security vendors have detected suspicious activity related to this domain. The page title “www.www.dododoex.finance” suggests a possible attempt to mimic legitimate sites or confuse users with redundant subdomain naming.

Currently, dododoex.finance is offline, reducing immediate risk to users. PhishDestroy recommends users avoid visiting or interacting with this domain if encountered. Security teams should maintain monitoring for any future activity or related domains. Users are advised to employ updated anti-phishing tools and report suspicious URLs to help prevent credential compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: www.www.dododoex.finance

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["mona.ns.cloudflare.com", "hunts.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Fortinet", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a171e-a687-71ab-82a2-05e600f78602.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2ffc1cf7-daa7-4a29-b8e8-b5ce576c1b95
- PhishDestroy: https://phishdestroy.io/domain/dododoex.finance/
- LLM endpoint: https://phishdestroy.io/domain/dododoex.finance/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dododoex.finance/
Last updated: 2026-03-19