# localexcrypto.com — SUSPICIOUS

> localexcrypto.com mimics Crypto.com in a fake giveaway scam. Threat is under investigation after 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies localexcrypto.com as a brand impersonation site targeting Crypto.com users under the seed 3c4e5c. This domain is currently under investigation as part of a suspected cryptocurrency giveaway scam designed to deceive visitors into transferring funds to attacker-controlled wallets. The site employs UI elements lifted directly from the legitimate Crypto.com platform to enhance credibility and urgency, a common tactic in drainer kit deployments.

This domain was flagged for impersonating Crypto.com and resolves to IP 43.134.124.227 via registrar Name SRS AB. Domain creation occurred on April 02, 2026, and it currently holds a VirusTotal detection score of 0/95, indicating no immediate blocklist inclusion or antivirus recognition. The SSL certificate is issued by Let’s Encrypt, which does not inherently validate the legitimacy of the domain. Google Safe Browsing (GSB) status and third-party blocklist counts remain unverified at this time.

As of current assessment, localexcrypto.com remains active with a risk level marked as 'under_investigation.' No official blocklist entries have been confirmed, and the site continues to operate without detections. Users are advised to avoid clicking links related to this domain and to cross-check all Crypto.com communications against the official domain (crypto.com). Until further forensic analysis is completed, the residual risk of encountering this impersonation remains elevated, particularly for users expecting legitimate promotions from Crypto.com.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Crypto.com

## Domain Intelligence
- Registered: 2026-04-02 09:30:09
- Registrar: Name SRS AB
- IP: 43.134.124.227

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/localexcrypto.com
- PhishDestroy: https://phishdestroy.io/domain/localexcrypto.com/
- LLM endpoint: https://phishdestroy.io/domain/localexcrypto.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/localexcrypto.com/
Last updated: 2026-04-02