# rentreclaim.org — SUSPICIOUS

> Explore the current risk assessment of rentreclaim.org, a domain linked to crypto draining activities. Learn about its status and technical details.

## Summary
PhishDestroy has identified rentreclaim.org as a domain associated with crypto drainer activities, currently classified with an 'under investigation' risk level. This classification stems from emerging intelligence indicating potential involvement in illicit crypto asset extraction, though definitive proof remains pending further analysis.

Technically, rentreclaim.org was registered recently on March 18, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED. It resolves to the IP address 172.67.191.100. Despite its suspicious profile, VirusTotal scans show no detections across 95 security engines, suggesting it has not yet been flagged by antivirus or threat detection vendors. This lack of detection emphasizes the need to monitor the domain proactively due to its novel registration and potential threat indicators.

Currently, rentreclaim.org remains active and under continuous surveillance. PhishDestroy recommends caution when interacting with this domain and advises organizations to watch for any related phishing attempts or crypto theft campaigns. As investigations evolve, updates will be provided to ensure users and security teams remain informed about any shifts in the domain's threat posture.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registered: 2026-03-18 01:44:10
- Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
- IP: 172.67.191.100
- Nameservers: dolly.ns.cloudflare.com nick.ns.cloudflare.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/g5J0Xj9/70a98b62eb08.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a62814e8-7544-4092-8e73-a1a32aaa8ad8
- PhishDestroy: https://phishdestroy.io/domain/rentreclaim.org/
- LLM endpoint: https://phishdestroy.io/domain/rentreclaim.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rentreclaim.org/
Last updated: 2026-03-19