doodk[.]lol

The domain doodk.lol hosts a page titled "Lumia | HyperNodes," suggesting it presents itself as a platform related to "Lumia" and "HyperNodes." The threat posed is likely a fraudulent scheme, potentially impersonating the legitimate Lumia brand (associated with blockchain or node services) to deceive users into providing credentials, funds, or other sensitive information. The exact nature of the scam cannot be determined from available data, but the site's association with a suspicious registrar and detection by multiple security vendors indicates malicious intent.

Technical evidence shows the site was flagged by 4 out of 95 VirusTotal vendors, specifically Ermes, Fortinet, Gridinsoft, and SOCRadar, and appears on 4 blocklists. The IP address is 188.114.96.3, located in the United States and hosted by AS13395 Cloudflare, Inc. The domain was created on 2026-02-21 and registered through NiceNIC International Group Co., Limited. The site uses no SSL certificate, and its nameservers are arushi.ns.cloudflare.com and rudy.ns.cloudflare.com.

The domain is currently offline, reducing immediate risk. However, the combination of a recent creation date, detection by multiple security vendors, a suspicious registrar, and lack of SSL encryption indicates a high-risk profile if the site becomes active again. Users should avoid any interaction with this domain or similar impersonations of the Lumia brand.