m[.]dogecoinkan[.]com

PhishDestroy has flagged the domain m.dogecoinkan.com as a high-risk crypto drainer impersonating legitimate Dogecoin trading platforms. The threat involves a fraudulent webpage designed to deceive users into connecting cryptocurrency wallets, where drainer scripts would silently transfer funds to attacker-controlled addresses. The page title explicitly references Dogecoin trading metrics and real-time price tracking, mimicking legitimate platforms like Dogecoin.com to establish credibility. No known drainer kit signatures were detected in public sandboxes at the time of analysis, suggesting either obfuscation or a newer deployment method. This domain exhibits multiple red flags consistent with active phishing infrastructure. VirusTotal reports a detection ratio of 1 out of 95 security vendors (1.05%) as of the latest scan, indicating low initial visibility despite clear malicious intent. The domain was registered through Gname.com Pte. Ltd. on June 05, 2025, making it a recently deployed asset likely leveraging fresh registration periods to evade takedowns. It resolves to IP address 172.67.216.187, which hosts multiple suspicious domains in the same category. Notably, the domain holds a valid Let's Encrypt SSL certificate, adding a false sense of legitimacy for unsuspecting users. Current blocklist coverage shows minimal inclusion, with no presence in Google Safe Browsing (GSB) databases at this time. The domain remains actively malicious as confirmed by continuous monitoring. PhishDestroy detected the threat on its launch date and has maintained persistent visibility through automated scanning. While the low VirusTotal detection rate suggests delayed recognition by some vendors, the domain's specific targeting of Dogecoin traders indicates a focused attack with high potential for successful exploitation. Immediate defensive actions include blocking the domain at DNS/network levels and updating firewall rules to prevent access. Users are strongly advised to verify any Dogecoin-related domains through PhishDestroy's validation tools prior to wallet connections, as this threat demonstrates that even recently registered domains with SSL certificates can harbor active drainer infrastructure. The remaining risk is assessed as high due to the domain's live status, credential phishing potential, and the irreversible nature of cryptocurrency transactions.