crownipsgwzaj3eby5pienlzanam5qjreedgvvqlctlkllx7l2x7nyyd[.]xyz

PhishDestroy identifies crownipsgwzaj3eby5pienlzanam5qjreedgvvqlctlkllx7l2x7nyyd.xyz as an active crypto drainer phishing domain masquerading as a Marketplace Access Queue portal. The domain is currently classified as under investigation with a risk level marked as active, indicating ongoing suspicious activity. This domain was flagged by 1 of 95 VirusTotal security vendors as of the latest scan, suggesting it has not yet been widely recognized as malicious. It was registered through NameSilo, LLC on May 10, 2026, and resolves to the IP address 185.114.96.3. The domain uses a Let's Encrypt SSL certificate and displays a page title of 'Marketplace Access Queue' to appear legitimate. No blocklist entries or trust score data were available at the time of analysis. Users are advised to avoid interacting with this domain or any embedded links. If this domain was accessed, it is recommended to review cryptocurrency wallet transactions for unauthorized transfers, change associated account credentials if entered, and report the incident to relevant platform security teams. Always verify domain legitimacy through official channels before providing any sensitive information.