microbiodao[.]com

Analysis of microbiodao.com shows a newly registered domain, created on September 28, 2025, that is currently offline but has been flagged by multiple anti‑phishing services. The site’s page title resolves to "Microbiome DAO," suggesting an attempt to impersonate a legitimate microbiome‑focused organization or DAO. The domain is hosted on Cloudflare’s network (ASN 13335) and resolves to the IP address 188.114.96.3, a Cloudflare edge node located in the United States. Registration was performed through NiceNIC International Group Co., Limited, and the authoritative name servers are brian.ns.cloudflare.com and veronica.ns.cloudflare.com, both belonging to Cloudflare’s DNS service.

The domain appears on two public blocklists and has been captured by PhishDestroy and ScamSniffer, indicating that security vendors have identified it as malicious. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of trust. VirusTotal reports that one of ninety‑five scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. No SSL/TLS certificate is presented, meaning the site does not support HTTPS, which is typical for many phishing infrastructures.

Given the absence of an active service, concrete payload details such as login forms or credential‑stealing pages cannot be verified, and the exact phishing narrative remains unknown. However, the combination of recent registration, Cloudflare hosting, low trust scores, blocklist presence, and detection by dedicated phishing tools provides sufficient evidence for defensive actions. Organizations should add microbiodao.com to URL filtering and DNS sinkhole rules, monitor for any future resolution changes, and enforce strict email and web gateway policies to block traffic to the domain. Continuous re‑evaluation is advised in case the site is re‑activated or new indicators emerge.