# ouyi.solutions — SUSPICIOUS > ouyi.solutions is flagged as an active crypto drainer scam. 1 of 95 security vendors detected this threat. ## Summary PhishDestroy identifies ouyi.solutions as an active generic phishing domain posing as a cryptocurrency drainer kit. No specific brand or drainer kit name has been attributed to this domain in open-source intelligence; however, its structure and recent creation strongly suggest it is part of a broader campaign targeting cryptocurrency users by impersonating legitimate services or platforms. This domain was flagged by 1 out of 95 security vendors on VirusTotal, indicating elevated risk. It was registered through Dynadot Inc on March 27, 2025, and resolves to IP address 54.215.31.113 using a Let's Encrypt SSL certificate. At the time of analysis, this domain has not been flagged in Google Safe Browsing (GSB) and remains unblocked by most threat intelligence platforms, increasing its potential reach to unsuspecting users. The domain ouyi.solutions remains active as of the latest assessment. Users are strongly advised to block this domain at the network level and avoid any interaction. The risk level is elevated due to its recent creation, low detection rate, and active infrastructure. While immediate takedown actions may be limited, continuous monitoring is recommended to prevent further exploitation. Remaining risk is moderate as threat actors may quickly pivot domains to evade detection. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2025-03-27 17:41:47 - Registrar: Dynadot Inc - IP: 54.215.31.113 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/b897aeb3-fd1e-4f51-b311-cec5e35d71ab - PhishDestroy: https://phishdestroy.io/domain/ouyi.solutions/ - LLM endpoint: https://phishdestroy.io/domain/ouyi.solutions/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/ouyi.solutions/ Last updated: 2026-03-22