# scsvfvbf.vip — SUSPICIOUS

> PhishDestroy warns that scsvfvbf.vip is a crypto drainer scam impersonating major wallets. This domain registered on 12/20/2025 via Gname.com resolves to 188.

## Summary
PhishDestroy identifies scsvfvbf.vip as a high-risk crypto drainer domain (generic_phishing) currently under investigation (risk level: under_investigation). This domain was flagged by PhishDestroy with 0/95 VirusTotal detections, registered via Gname.com Pte. Ltd. on December 20, 2025, resolving to IP 188.114.97.3 with an SSL certificate from Google Trust Services.  

The domain exhibits no detections on VirusTotal despite its recent creation, suggesting it may be newly operational or employing evasion tactics. The registrar (Gname.com) has been associated with malicious domains in the past, and the IP address (188.114.97.3) is linked to known fraudulent infrastructure.  

Users should avoid interacting with this domain entirely. If exposed, revoke any wallet connections immediately, transfer funds to a secure wallet, and scan devices for malware. Report the domain to PhishDestroy for further analysis.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-20 01:26:21
- Registrar: Gname.com Pte. Ltd.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ef2eb63b-d24d-4dfe-9d0e-ca6a0083e321
- PhishDestroy: https://phishdestroy.io/domain/scsvfvbf.vip/
- LLM endpoint: https://phishdestroy.io/domain/scsvfvbf.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/scsvfvbf.vip/
Last updated: 2026-03-21