dogecoin[.]fan

PhishDestroy has identified an active typosquatting domain, dogecoin.fan, which impersonates the legitimate cryptocurrency Dogecoin to deceive users into participating in a fake 'giveaway' scam. The domain mimics the branding and messaging of the real Dogecoin project to lure victims into connecting their cryptocurrency wallets or transferring funds under the false promise of receiving free tokens. Such tactics are common in cryptocurrency scams, where threat actors exploit the hype and volatility of digital assets to maximize victim engagement and financial gain. This domain was flagged with a risk status of 'under_investigation' and poses a significant threat due to its deceptive nature. It currently shows 10/95 detections on VirusTotal, indicating that most antivirus engines have not yet flagged it. The domain resolves to IP address 185.199.108.153 and was registered through Name.com, Inc. on September 3, 2022. It also utilizes a Let's Encrypt SSL certificate, which may further legitimize its appearance to unsuspecting users. The combination of a recently registered domain, low detection rates, and the use of a trusted SSL provider makes this a stealthy and effective threat vector. Users who have visited dogecoin.fan should immediately cease any interaction with the site and disconnect from it. Avoid entering any personal information, wallet credentials, or cryptocurrency details, as these could be harvested by the scammers. If you connected a wallet or approved any transactions, revoke permissions immediately through your wallet provider and report the incident to the appropriate cryptocurrency fraud authorities. Additionally, block the domain at your network level and report it to your domain registrar or hosting provider to help mitigate further exposure. Stay vigilant for similar typosquatting domains and always verify URLs and offers before engaging with cryptocurrency-related websites.