ddg-offical[.]su

This domain, ddg-offical.su, is flagged for hosting a fraudulent DDOS stresser service phishing page. Analysis indicates the site impersonates a legitimate web stress testing platform to deceive users into engaging with malicious infrastructure. The threat type is classified as brand impersonation with elevated risk due to its deceptive presentation and potential for credential harvesting or malware distribution under the guise of a stress testing tool. Infrastructure analysis reveals the domain was registered on March 03, 2026, through RUCENTER-SU, an uncommon registrar for such services. It resolves to the IP address 104.21.77.28, utilizing Cloudflare for hosting and protection, including Cloudflare Browser Insights and HTTP/3 protocols. The domain appears on one security blocklist and is flagged by 7 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt, and the domain has a Gridinsoft trust score of 0/100. The page title, "DDG Stresser Web Testing — Official Projects," further reinforces the impersonation of a legitimate service. Mitigation steps for this threat include immediate blocking of the domain and its associated IP address (104.21.77.28) at the network perimeter. Organizations should deploy indicators of compromise (IOCs) such as the domain, IP, and registrar details into security monitoring systems to detect related activity. User awareness training should emphasize the risks of interacting with unofficial or untrusted stress testing platforms, particularly those hosted on newly registered domains or utilizing anonymizing services like Cloudflare. Additionally, security teams should monitor for any attempts to access or download tools from such domains, as they may contain embedded malware or backdoors.