doodlas[.]app

This domain is flagged as a brand impersonation threat targeting users with a fraudulent NFT airdrop scheme. The site, doodlas.app, presents itself as a portal for claiming Doodles NFT airdrops or mints, a tactic commonly used to deceive victims into connecting cryptocurrency wallets or divulging private keys. Such schemes often deploy malicious smart contracts or phishing forms to drain funds from unsuspecting users, exploiting the high-value perception of NFT projects to maximize engagement. Analysis indicates the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.166.222, which is proxied through Cloudflare, a common evasion technique to obscure the true hosting origin. The domain appears on four security blocklists, and VirusTotal reports that 4 out of 95 security vendors flag it as malicious. The SSL certificate is issued by Google Trust Services, a legitimate provider, which does not mitigate the underlying fraudulent intent. Technologies detected include Cloudflare and HTTP/3, further suggesting an attempt to leverage modern infrastructure to appear credible. Users who visited doodlas.app or interacted with its content should immediately disconnect any connected wallets from the site and revoke permissions for any associated smart contracts. Monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if suspicious activity is detected. Report the domain to relevant security platforms to aid in takedown efforts and warn others. Exercise caution with future airdrop promotions, verifying official project channels before engaging with any claims or mints.