ntfshop-magic-eden[.]com

ntfshop-magic-eden.com is a newly registered Internet resource that has been observed in phishing‑related security data. The domain was created on 21 February 2026 and is delegated to Cloudflare name servers aiden.ns.cloudflare.com and stella.ns.cloudflare.com. Cloudflare services are confirmed by the presence of HTTP/3 support. The registrar listed for the registration is NiceNIC International Group Co., Limited.

Reputation checks indicate that the domain appears on one security blocklist and has been added to the PhishDestroy blocklist. Google Safe Browsing classifies the site as a social‑engineering threat, and VirusTotal reports that two of ninety‑five scanned scanners have raised detections against the domain. The page title returned by the host is “www.www.magiceden-ntf.com”, which does not correspond to a known legitimate brand and suggests a possible attempt to impersonate Magic Eden services. At the time of analysis the host is reported as offline, which limits current content inspection, but the historical indicators are sufficient for defensive action.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanism because the site content has not been captured. Defenders should continue to block the domain at network and DNS layers, monitor for any resurrection of the host, and consider adding the domain to internal threat‑intel feeds. Ongoing observation of the associated Cloudflare name servers is advised, as they may host additional malicious assets.