moondoge[.]ai-cryptolist[.]com

The domain moondoge.ai-cryptolist.com was registered on April 11, 2026 through Key-Systems GmbH and is currently active. DNS resolution points to IP address 188.114.96.3, which is located in Canada and belongs to Cloudflare, Inc. The domain uses Cloudflare’s own infrastructure, as indicated by the presence of Cloudflare nameservers (aragorn.ns.cloudflare.com, wanda.ns.cloudflare.com) and detection of HTTP/3 support. An SSL certificate issued by Google Trust Services (WE1) secures the connection, but the web server returns an HTTP 403 status code and presents the page title "Suspected Misleading Website | Cloudflare". Security telemetry shows that 17 of 94 VirusTotal scanners have flagged the domain, Gridinsoft assigns a trust score of 0 / 100, and PhishDestroy has placed the domain on its blocklist. The site is classified as a crypto drainer targeting Cloudflare brand impersonation, and it appears on one additional security blocklist. While the exact page content has not been disclosed, the available infrastructure signals a deliberate attempt to exploit Cloudflare’s brand reputation. Defenders should block the domain at DNS and network layers, add the IP address to threat intelligence feeds, and monitor for related sub‑domains or similar naming patterns. Continuous scanning of the host for emerging indicators and updating firewall rules are recommended to mitigate potential credential or cryptocurrency theft attempts.