easybuydogecoin[.]com

Analysis indicates that the domain easybuydogecoin.com was registered on 21 January 2023 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses the default websitewelcome.com name servers ns1291.websitewelcome.com and ns1292.websitewelcome.com. The domain resolves to the IP address 216.239.34.21, which is associated with Google Cloud hosting infrastructure. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, reflecting its classification as a phishing resource. VirusTotal scans show that 11 of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious use. The current WHOIS record shows the domain remains active as of the report date. Concrete evidence points to a generic cryptocurrency phishing campaign targeting users interested in Dogecoin, although the exact phishing page content has not been publicly disclosed. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms employed, as no page‑level analysis is available. Defenders should block the domain at DNS and firewall layers, monitor DNS queries for the associated IP address, and consider adding the domain to internal blacklists. Ongoing observation of the hosting provider’s IP range is advised, given the possibility of additional malicious sites sharing the same infrastructure.