cr1p17os[.]com

This domain is currently under investigation for generic phishing activity targeting cryptocurrency users. The threat appears to be in an active phase, with domain infrastructure being provisioned for malicious purposes. PhishDestroy identifies cr1p17os.com as a high-risk entity due to its suspected involvement in phishing campaigns aimed at stealing cryptocurrency credentials or funds.

This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has not yet been widely recognized by security vendors. The domain was created on April 06, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED using a Let's Encrypt SSL certificate. It resolves to IP address 185.111.111.154, which has no recorded trust scores or known associations with legitimate services. No blocklist entries were found for this domain at the time of analysis.

To mitigate risks associated with cr1p17os.com, users should avoid interacting with any links or content hosted on this domain, especially those requesting cryptocurrency transactions or login credentials. Organizations should monitor network traffic for connections to 185.111.111.154 and flag emails or websites referencing this domain. Administrators are advised to implement DNS filtering to block resolution of cr1p17os.com and report indicators to threat intelligence platforms for further analysis.