changepasspp[.]com[.]vn

PhishDestroy identifies changepasspp.com.vn as a fake password change portal hosting a crypto drainer. The domain leverages a Let's Encrypt SSL certificate for legitimacy, resolving to IP 42.96.35.96. As of current intelligence, VirusTotal shows 20/95 detections, indicating undetected threat status. This domain was flagged for impersonating a password change service, likely targeting users seeking to update credentials for platforms such as email or financial accounts. The domain was registered under the .vn ccTLD, with registration details still under analysis. VirusTotal’s lack of detections suggests it remains under the radar, while the Let’s Encrypt certificate adds a layer of false legitimacy. The IP address 42.96.35.96 hosts multiple domains, some of which have been previously associated with low-reputation activities. No current blocklist entries were found at the time of this report, but ongoing monitoring is required as new intelligence emerges. Users who visited changepasspp.com.vn or entered credentials should immediately revoke any exposed passwords and enable two-factor authentication on affected accounts. Run a malware scan on devices used to access the domain, as crypto drainers may also deploy additional payloads. Avoid interacting with this domain entirely, and report the site to PhishDestroy for further analysis. Stay vigilant for unexpected login attempts or unauthorized transactions post-visit.