# cleancrypto.info — SUSPICIOUS

> cleancrypto.info is a crypto drainer phishing site with 0/95 VirusTotal detections. It impersonates a crypto service to steal funds.

## Summary
PhishDestroy identifies cleancrypto.info as an active crypto drainer phishing domain under investigation for generic phishing tactics. This site poses a high risk to cryptocurrency users by mimicking legitimate crypto services to trick visitors into connecting wallets or entering seed phrases, enabling direct fund theft. Users should treat this domain as hostile and refrain from any engagement, including clicking links or visiting the page.


This domain was flagged with a threat type of generic phishing and is currently unresolved with a risk level marked as under investigation. Technical indicators include resolution to IP 45.148.103.65, a valid Let's Encrypt SSL certificate, registration through Global Domain Group LLC on January 22, 2026, and 0 detections out of 95 on VirusTotal as of the last assessment. No blocklist entries or trust score data are currently available for this newly registered domain, indicating it has not yet been widely recognized or mitigated by security services.


Mitigation steps for crypto drainer phishing sites like cleancrypto.info require immediate action. Users must avoid visiting or interacting with the domain entirely. If funds were connected or entered, revoke wallet permissions immediately using tools like revoke.cash or by disconnecting the wallet from the suspicious dApp. Always verify URLs through official sources and use hardware wallets for sensitive transactions. Report the domain to relevant platforms and block it at the network level to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-22 16:41:11
- Registrar: Global Domain Group LLC
- IP: 45.148.103.65

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d55d788b-78d9-4a30-9d6b-9ed39665090f
- PhishDestroy: https://phishdestroy.io/domain/cleancrypto.info/
- LLM endpoint: https://phishdestroy.io/domain/cleancrypto.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cleancrypto.info/
Last updated: 2026-03-24