# claim-openvpp.info — SUSPICIOUS

> claim-openvpp.info is a crypto drainer scam with 0/95 detections. Review full indicators, risk factors, and safety recommendations now.

## Summary
PhishDestroy identifies claim-openvpp.info as an active crypto drainer domain currently under investigation.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating no current signature-based detection despite its malicious infrastructure. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to 172.67.215.215 and was created on March 18, 2026. It utilizes a Let's Encrypt SSL certificate, lending false legitimacy to potential victims. Analysis shows this infrastructure is likely part of a broader campaign targeting cryptocurrency holders through deceptive withdrawal portals or airdrop claims.

The domain remains active with minimal detection coverage, representing a significant risk to users engaging with its services. Immediate action is required: security teams should block 172.67.215.215 at the network perimeter and monitor for outbound connections to this IP. Users should verify any crypto-related domains through independent sources and avoid interacting with unsolicited withdrawal prompts. Organizations are advised to update threat intelligence feeds with the unique seed bb8e45 to enhance detection capabilities against similar campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 13:47:41
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.215.215

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2ef75d69-5c2b-49b0-85b6-3a014dad8a70
- PhishDestroy: https://phishdestroy.io/domain/claim-openvpp.info/
- LLM endpoint: https://phishdestroy.io/domain/claim-openvpp.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim-openvpp.info/
Last updated: 2026-03-23