bulldogito[.]next-cryptolist[.]net

This domain, bulldogito.next-cryptolist.net, is actively facilitating crypto drainer phishing attacks targeting cryptocurrency wallet users. The threat involves malicious scripts designed to siphon funds from connected wallets by exploiting deceptive transaction prompts or fake wallet interfaces. Victims are typically lured through phishing links distributed via social engineering, malicious advertisements, or compromised platforms, leading to financial loss upon interaction with the domain’s payload. Analysis indicates the domain is flagged by 19 out of 95 security vendors on VirusTotal, a significant detection rate for a phishing infrastructure. Registered through Key-Systems GmbH on April 11, 2026, the domain resolves to the IP address 104.21.64.107 and is currently listed on two security blocklists. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing domains frequently leverage legitimate certificates to appear trustworthy. Infrastructure analysis reveals the domain’s recent creation date aligns with common phishing campaign timelines, suggesting a short-term, high-impact operation. Users who have visited bulldogito.next-cryptolist.net or interacted with its content should immediately disconnect any connected wallets and revoke permissions for suspicious dApps or smart contracts. Scan the affected device for malware using updated security tools, and monitor wallet transactions for unauthorized activity. If funds were transferred, report the incident to the relevant blockchain explorer and consider filing a complaint with local cybercrime authorities. Avoid reusing passwords or seed phrases associated with the compromised session, and verify the legitimacy of any future cryptocurrency-related domains through independent sources.