# shop247.cc — SUSPICIOUS

> shop247.cc hosts a crypto drainer scam, flagged by 1 of 95 VirusTotal engines. Users should verify this threat on PhishDestroy before interaction.

## Summary
shop247.cc has been assessed with an elevated risk level due to its involvement in a crypto drainer scam targeting unsuspecting users. This specific threat aims to illicitly access cryptocurrency wallets by deceiving victims through fraudulent web pages.

PhishDestroy's analysis reveals that shop247.cc was created on April 12, 2022, and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain currently resolves to IP address 172.67.128.58 and holds a Google Trust Services SSL certificate, which may lend it an appearance of legitimacy. VirusTotal flags this domain by 1 out of 95 security vendors, indicating some recognition of its threat, but not yet widespread detection.

For mitigation, users should avoid entering sensitive information or cryptocurrency credentials on this site. Implementing endpoint protection and web filtering to block access based on domain reputation can reduce risk. Security teams are advised to monitor network traffic for connections to 172.67.128.58 and update blocklists accordingly. Verification of domain status with services like PhishDestroy is recommended before engaging with any related content.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2022-04-12 14:32:35
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.128.58

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3f47a655-7cb5-47af-bb97-9fa150f5084d
- PhishDestroy: https://phishdestroy.io/domain/shop247.cc/
- LLM endpoint: https://phishdestroy.io/domain/shop247.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/shop247.cc/
Last updated: 2026-03-26