hodl[.]5a-evmcheck[.]lol

Analysis of the domain hodl.5a-evmcheck.lol indicates that it is currently flagged as a generic phishing site. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service. The single blocklist entry classifies the domain as malicious, but no additional blocklist sources have reported it, suggesting limited exposure in public threat feeds. A VirusTotal scan was performed on 91 antivirus and URL‑reputation engines; at the time of assessment none of the engines reported a detection. The lack of detections should not be interpreted as confirmation of legitimacy, as many phishing infrastructures evade existing signatures and heuristics.

No publicly available data on the domain’s registrar, creation date, hosting IP address, autonomous system number, or geographic location have been disclosed in the current intelligence set. Likewise, SSL/TLS certificate details, HTTP status codes, page title, or any referenced content hashes are absent from the collected evidence. The absence of these artifacts limits the ability to profile the underlying infrastructure or to correlate the domain with previously observed campaigns.

Given the available indicators, defensive teams should treat hodl.5a-evmcheck.lol as a high‑confidence phishing indicator. Immediate actions include adding the domain to deny‑list rules in web proxies, firewalls, and DNS filtering solutions, and ensuring that endpoint protection products that reference the PhishDestroy blocklist are updated. Monitoring for DNS queries to the domain and for any outbound connections from internal hosts is recommended. The risk level remains under investigation, but the presence on a phishing‑specific blocklist warrants proactive mitigation.