otcdeskcrypto[.]com

PhishDestroy identifies otcdeskcrypto.com as an active brand impersonation domain targeting Crypto.com users. This domain replicates the branding and trading interface of the legitimate Crypto.com OTC desk to trick victims into depositing funds or exposing credentials. No drainer kit has been extracted from the page, suggesting this may be an early-stage phishing site awaiting further exploitation. The threat is currently classified as under investigation due to limited behavioral telemetry but poses a clear risk to cryptocurrency traders seeking OTC services.

This domain resolves to IP address 188.114.97.3 and is registered through Name SRS AB. VirusTotal reports 1/95 detections, indicating it remains undetected by most antivirus engines. The domain was created on April 03, 2026, and uses a Let’s Encrypt SSL certificate. It has not yet been added to Google Safe Browsing (GSB) and remains unflagged on public blocklists as of the latest scan.

As of today, the domain remains active and accessible. Immediate actions include domain takedown requests to the registrar and hosting provider, while users should avoid accessing the site entirely. The remaining risk is elevated due to the domain’s recent registration, clean reputation, and plausible mimicry of a legitimate financial service. Users are advised to verify URLs, use bookmarks, and enable multi-factor authentication on their Crypto.com accounts to mitigate exposure.