otcjdcrypto[.]vip

PhishDestroy identifies otcjdcrypto.vip as a generic phishing domain currently under investigation for active crypto drainer operations. This domain, registered through Gname.com Pte. Ltd., is currently classified with a status of 'active' and remains unflagged by traditional detection systems despite clear malicious indicators. The domain is designed to deceive users into unknowingly transferring cryptocurrency to attacker-controlled wallets, posing significant financial risk to unsuspecting victims engaging with fraudulent OTC crypto services.

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating it has evaded detection by most security solutions. otcjdcrypto.vip resolves to IP address 104.21.66.41 and was created on June 09, 2025, making it a recently established threat. It has already been blocked by ScamSniffer and InversionDNS and appears on 2 security blocklists, while Google Safe Browsing has flagged it under the SOCIAL_ENGINEERING category. Despite holding an SSL certificate from Google Trust Services, the domain exhibits multiple red flags including its association with crypto drainer operations and recent registration date.

Given the active status and sophisticated evasion techniques employed by this domain, users are strongly advised to avoid interacting with otcjdcrypto.vip entirely. PhishDestroy recommends verifying any suspicious domains through its database before engaging in transactions or sharing sensitive information. The combination of zero VirusTotal detections, recent domain creation, and multiple blocklist appearances creates a high-risk profile that demands immediate caution from both security researchers and everyday internet users.