hot-doge[.]ai-cryptolist[.]net

PhishDestroy identifies hot-doge.ai-cryptolist.net as a generic phishing domain targeting cryptocurrency users through credential theft. While no specific brand or drainer kit is mentioned in the intelligence, the domain's structure suggests it may impersonate legitimate crypto services to steal login credentials or seed phrases. The domain was created on April 11, 2026, and is currently offline, but its registration through Key-Systems GmbH and use of Google Trust Services SSL certificate (WE1) indicate an attempt to appear legitimate.

Technical indicators are particularly concerning: VirusTotal reports 2 out of 95 security vendors flagging the domain, and it appears on one security blocklist. The domain resolves to IP address 104.21.68.219, which is associated with Cloudflare, often used by phishers to obscure hosting. Despite being offline, the domain's recent creation and low but nonzero detection rate suggest it may have been active for a short period before takedown. Google Safe Browsing status is not explicitly provided, but the blocklist presence indicates prior malicious activity.

The domain has been taken offline, likely due to security vendor or registrar intervention. However, residual risk remains if users previously submitted credentials or visited the site before takedown. PhishDestroy recommends changing any passwords or enabling two-factor authentication on affected accounts, monitoring for unauthorized transactions, and reporting the domain to additional blocklists. Users should remain vigilant against similar domains with the same IP or registrar pattern.