dogicoinwallete[.]webflow[.]io

PhishDestroy identifies the domain dogicoinwallete.webflow.io as an active crypto drainer currently propagating fraudulent cryptocurrency wallet services. This fraudulent site is designed to deceive users into connecting their digital wallets under false pretenses, enabling unauthorized cryptocurrency transfers to attacker-controlled addresses. The threat is classified as elevated due to its active status and direct targeting of blockchain users seeking wallet services.

This domain was flagged by 2 of 95 VirusTotal security vendors, indicating low but present detection across major security platforms. It resolves to IP address 172.64.151.8 and operates with a valid SSL certificate issued by Google Trust Services, which may contribute to its ability to evade some detection mechanisms. While specific creation date and registrar information are not provided in available data, the low VirusTotal detection rate and active propagation suggest this is a recently deployed campaign leveraging compromised or fraudulent Webflow.io subdomains to host malicious wallet interfaces.

Current status remains active as of the latest intelligence update, with the domain continuing to operate and potentially expanding its victim base. Concrete recommendations include immediate blocking of the domain at network and DNS levels for all users and security systems. Organizations should alert cryptocurrency users within their networks to avoid interacting with this domain or any similar wallet services. Additionally, security teams should review firewall rules, DNS sinkholes, and endpoint protection configurations to prevent access to this and related fraudulent domains.