mydogewallet[.]org

mydogewallet.org is an active crypto drainer site observed since its registration on 12 May 2026 through Key-Systems GmbH. The domain resolves to IP 45.61.129.98, which is geolocated to the United States and associated with the organization listed as FranTech Solutions. Infrastructure analysis shows the host runs Ubuntu with Nginx, serves content over HTTPS with HSTS enabled, and presents a valid certificate issued by a public certificate authority. The page title advertises “My Doge Wallet – DOGE Wallet for Windows, macOS, Linux”, indicating an attempt to lure cryptocurrency users. Threat intelligence sources have recorded the domain in sixteen AlienVault OTX pulses and it is listed on at least one security blocklist. VirusTotal scans report five detections out of ninety‑one vendors, and the Gridinsoft trust score is 0 out of 100, reinforcing the malicious classification. HTTP response code is 200, confirming active web service. Nameservers ns3.my-ndns.com and ns4.my-ndns.com are authoritative. While the exact phishing kit or credential capture mechanism has not been disclosed, the combination of crypto‑related branding, low trust scores, and multiple detections suggests a high‑risk operation aimed at draining cryptocurrency wallets. Defenders should block the domain and its IP at network perimeters, monitor DNS queries for the associated nameservers, and include the indicator set in endpoint and email filtering rules. Ongoing observation is recommended to detect any changes in hosting or payload delivery.