# changepasspp.com.vn — SUSPICIOUS

> changepasspp.com.vn operates a fake password change portal. This crypto drainer mimics a legitimate service.

## Summary
PhishDestroy identifies changepasspp.com.vn as a fake password change portal hosting a crypto drainer. The domain leverages a Let's Encrypt SSL certificate for legitimacy, resolving to IP 42.96.35.96. As of current intelligence, VirusTotal shows 0/95 detections, indicating undetected threat status.    This domain was flagged for impersonating a password change service, likely targeting users seeking to update credentials for platforms such as email or financial accounts. The domain was registered under the .vn ccTLD, with registration details still under analysis. VirusTotal’s lack of detections suggests it remains under the radar, while the Let’s Encrypt certificate adds a layer of false legitimacy. The IP address 42.96.35.96 hosts multiple domains, some of which have been previously associated with low-reputation activities. No current blocklist entries were found at the time of this report, but ongoing monitoring is required as new intelligence emerges.    Users who visited changepasspp.com.vn or entered credentials should immediately revoke any exposed passwords and enable two-factor authentication on affected accounts. Run a malware scan on devices used to access the domain, as crypto drainers may also deploy additional payloads. Avoid interacting with this domain entirely, and report the site to PhishDestroy for further analysis. Stay vigilant for unexpected login attempts or unauthorized transactions post-visit.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 42.96.35.96

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/changepasspp.com.vn
- PhishDestroy: https://phishdestroy.io/domain/changepasspp.com.vn/
- LLM endpoint: https://phishdestroy.io/domain/changepasspp.com.vn/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/changepasspp.com.vn/
Last updated: 2026-04-04