# otcjdcrypto.vip — SUSPICIOUS

> PhishDestroy warns: otcjdcrypto.vip is a crypto drainer phishing site impersonating OTC crypto platforms. Currently 0/95 VirusTotal vendors detect it.

## Summary
PhishDestroy identifies otcjdcrypto.vip as a generic phishing domain currently under investigation for active crypto drainer operations. This domain, registered through Gname.com Pte. Ltd., is currently classified with a status of 'active' and remains unflagged by traditional detection systems despite clear malicious indicators. The domain is designed to deceive users into unknowingly transferring cryptocurrency to attacker-controlled wallets, posing significant financial risk to unsuspecting victims engaging with fraudulent OTC crypto services.  

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating it has evaded detection by most security solutions. otcjdcrypto.vip resolves to IP address 104.21.66.41 and was created on June 09, 2025, making it a recently established threat. It has already been blocked by ScamSniffer and InversionDNS and appears on 2 security blocklists, while Google Safe Browsing has flagged it under the SOCIAL_ENGINEERING category. Despite holding an SSL certificate from Google Trust Services, the domain exhibits multiple red flags including its association with crypto drainer operations and recent registration date.  

Given the active status and sophisticated evasion techniques employed by this domain, users are strongly advised to avoid interacting with otcjdcrypto.vip entirely. PhishDestroy recommends verifying any suspicious domains through its database before engaging in transactions or sharing sensitive information. The combination of zero VirusTotal detections, recent domain creation, and multiple blocklist appearances creates a high-risk profile that demands immediate caution from both security researchers and everyday internet users.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-09 02:03:42
- Registrar: Gname.com Pte. Ltd.
- IP: 104.21.66.41

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["ScamSniffer", "InversionDNS"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f6bbbd29-78bb-4c2b-9a5e-ae7b7d199211
- PhishDestroy: https://phishdestroy.io/domain/otcjdcrypto.vip/
- LLM endpoint: https://phishdestroy.io/domain/otcjdcrypto.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/otcjdcrypto.vip/
Last updated: 2026-03-31