usddoo[.]com

Analysis of www.usddoo.com indicates that the domain is actively associated with a fake‑exchange phishing campaign. The domain was registered on March 14, 2026 through GoDaddy.com, LLC and subsequently pointed to the Cloudflare‑owned address 104.21.39.163, which resolves to a Cloudflare data centre in Canada. DNS configuration lists the Cloudflare nameservers carlos.ns.cloudflare.com and priscilla.ns.cloudflare.com, and the HTTPS service is secured by a Let’s Encrypt certificate (issuer E8). The page title returned by the server is “Attention Required!

| Cloudflare”, and the site presents Cloudflare Browser Insights, Cloudflare and HTTP/3 headers, confirming the use of Cloudflare’s edge infrastructure. Reputation checks show that the domain appears on a single security blocklist and has been blocked by the PhishDestroy feed. Gridinsoft’s trust scoring system assigns a score of 0 / 100, indicating maximal distrust. VirusTotal analysis records ten positive detections out of ninety‑one scanned scanners, reinforcing the malicious classification.

The threat is cataloged as a “Fake Exchange” phishing attempt, suggesting that the site is intended to harvest credentials by masquerading as a legitimate exchange platform, although the exact content of the landing page has not been publicly disclosed. Given the observed indicators—registrar information, Cloudflare hosting, low trust score, blocklist presence, and multiple vendor detections—defenders should treat www.usddoo.com as malicious. Recommended actions include adding the domain and its resolving IP address to outbound and inbound deny lists, monitoring for any re‑registration attempts, and maintaining up‑to‑date phishing filters that incorporate the observed blocklist and PhishDestroy feed. As the site is currently offline, continuous observation is advised to detect any future re‑activation.