# ocrn2000.com — SUSPICIOUS

> ocrn2000.com is a fraudulent site posing as a trusted service, flagged by 1/95 VirusTotal vendors. Users risk stolen credentials or financial data; avoid and.

## Summary
ocrn2000.com is an active fraudulent website designed to deceive users into sharing sensitive information such as login credentials, payment details, or personal data. This site mimics legitimate services, likely tricking victims into entering their details under false pretenses. Security researchers have identified this domain as a confirmed threat due to its malicious intent and the presence of phishing elements aimed at harvesting user data.  PhishDestroy identifies this domain as a confirmed fraudulent website posing as a legitimate service. The site was flagged by 1 out of 95 security vendors on VirusTotal, indicating a lower but notable detection rate. Notably, ocrn2000.com was registered on February 19, 2026, through Dominet (HK) Limited and resolves to the IP address 188.114.97.3. Its SSL certificate, issued by Let's Encrypt, provides a false sense of security, as compromised sites often use valid certificates to appear legitimate. The domain's recent creation date suggests it is a newly deployed threat, likely targeting unsuspecting users.  If you visited ocrn2000.com, assume your data may have been compromised. Immediately change any passwords or credentials you entered on the site and monitor your accounts for suspicious activity such as unauthorized transactions. Scan your devices for malware using reputable antivirus software and consider enabling two-factor authentication for added security. Avoid interacting with this domain and report it to your IT security team or through platforms like VirusTotal or PhishDestroy to help mitigate further risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: ocrn2000.com

## Domain Intelligence
- Registered: 2026-02-19 16:56:02
- Registrar: Dominet (HK) Limited
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/fdcf0625-6f98-4a1d-a340-3d733a12539d
- PhishDestroy: https://phishdestroy.io/domain/ocrn2000.com/
- LLM endpoint: https://phishdestroy.io/domain/ocrn2000.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ocrn2000.com/
Last updated: 2026-03-22