doood[.]world

Analysis of the domain doood.world indicates it was registered on 21 February 2026. The site is currently taken offline, and its HTTPS certificate is identified as WE1. The only publicly observed indicator is the page title “Just a moment…”, which was captured before the takedown. The domain appears on a single blocklist, PhishDestroy, confirming that at least one security feed has classified it as malicious.

VirusTotal has processed the domain with 93 scanning engines, none of which returned a detection. While the absence of detections does not guarantee legitimacy, it reflects that the sample has not triggered known signatures in the tested engines. No additional intelligence such as registrar details, IP address, hosting ASN, or Safe Browsing status is available in the current dataset. Consequently, the full infrastructure behind the domain cannot be mapped, and the specific phishing campaign tactics remain unclear.

Defenders should add doood.world to their deny‑list or block rules, monitor for any resurgence of the domain or related look‑alike registrations, and continue to observe blocklist feeds for updates. Any inbound traffic to the domain should be logged and inspected, and endpoint protection solutions should be instructed to flag URLs containing the exact string “doood.world”. Given the limited data, continuous vigilance is advised.