dogesrewards[.]xyz

The domain dogesrewards.xyz was identified as a generic phishing threat designed to impersonate the Dogecoin ecosystem by offering a fraudulent DogeOS DOGECOIN + USDT Reward Event. This domain was registered through GoDaddy.com, LLC and resolved to the IP address 172.67.166.228. The page title explicitly claimed to be part of a reward event, a common lure used by threat actors to harvest credentials or cryptocurrency wallet information. No specific drainer kit was identified, but the page's content strongly suggests an attempt to trick users into connecting their wallets or providing sensitive data.

Technical indicators provide a clear picture of the threat. VirusTotal flagged the domain with a score of 6 out of 95 security vendors, indicating moderate but notable detection across the security community. AlienVault OTX reported it in two threat intelligence pulses, and the domain appeared on two security blocklists. The SSL certificate was issued by Google Trust Services / WE1, which is a legitimate certificate authority, making the site appear more trustworthy to unsuspecting victims. The domain's registration through GoDaddy and its resolution to a Cloudflare IP (172.67.166.228) are common characteristics of phishing infrastructure, as threat actors often leverage reputable services to evade detection.

As of the time of this assessment, dogesrewards.xyz has been taken offline, indicating that either the hosting provider, registrar, or law enforcement intervened. However, the residual risk remains that the same threat actor may deploy similar domains using different names or IP addresses. Users who may have interacted with this site are advised to monitor their accounts for unauthorized activity and to avoid clicking on unsolicited links promising cryptocurrency rewards. PhishDestroy recommends that organizations block this domain and its associated IP at the network level to prevent any future access attempts.