xxkskdjhxksjdlxiokx9802bbxnbxmxc-3fdob[.]ondigitalocean[.]app

On August 03, 2026, the domain xxkskdjhxksjdlxiokx9802bbxnbxmxc-3fdob.ondigitalocean.app was observed actively supporting a generic phishing operation. The infrastructure is hosted on DigitalOcean, as indicated by the “ondigitalocean.app” suffix, and the domain resolves to an IP address owned by DigitalOcean’s cloud network. Independent reputation services have flagged the domain: it appears on one security blocklist, Google Safe Browsing categorises it as social engineering, and the PhishDestroy service has added it to its blocked list.

VirusTotal analysis shows that five of ninety‑one scanning engines have reported the domain as malicious, confirming a non‑trivial detection rate. The limited detection footprint suggests the site may be newly deployed or employing techniques to evade broader detection. No public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content and lure mechanisms unconfirmed.

Defenders should immediately add the full domain and its parent zone (ondigitalocean.app) to inbound and outbound filtering rules, monitor DNS queries for the associated IP ranges, and consider sharing the indicator with threat‑share platforms. Continuous re‑scanning on VirusTotal and periodic checks against Google Safe Browsing are advised to capture any changes in the domain’s classification. The current evidence classifies the domain as an elevated‑risk phishing vector requiring proactive mitigation.