nft-gift[.]org

nft-gift.org is a phishing domain engaged in brand impersonation, specifically targeting the Jupiter platform on Solana by using the page title 'Jupiter - The Premier CEX Alternative on Solana' to deceive users into connecting their wallets. This domain operates as a wallet_connect_phish scam, designed to steal cryptocurrency credentials and drain funds. The domain has been taken offline, but its elevated risk level and association with a drainer kit (none) indicate it posed a serious threat to users seeking legitimate services on Solana.

Technical indicators for nft-gift.org show it was flagged by 1 of 95 VirusTotal vendors, including Gridinsoft, which gave it a trust score of 0/100. The domain was registered through Web Commerce Communications Limited on July 26, 2025, and resolves to IP address 172.67.189.132, hosted in the US by Cloudflare, Inc. (AS13335). It appears on 1 security blocklist (PhishDestroy) and was not flagged by Google Safe Browsing. No SSL certificate was issued for this domain. These details confirm the domain's malicious intent and its focus on Solana-based wallet phishing.

To protect against threats like nft-gift.org, users who may have interacted with this domain should immediately revoke any token approvals granted through wallet connections and transfer all funds to a new, secure wallet. For credential or login phishing, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized transactions and report the domain to relevant authorities, such as the impersonated brand (Jupiter) and security blocklists like PhishDestroy, to prevent future attacks.