# nekromancers.xyz — SUSPICIOUS

> Nekromancers.xyz is linked to potential phishing threats. Stay vigilant and avoid interactions with this domain. Learn more on PhishDestroy.

## Summary
PhishDestroy has identified nekromancers.xyz as a domain associated with generic phishing activities. Although the risk level is currently under investigation, caution is advised due to suspicious characteristics observed.

The domain was registered recently on March 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes linked to malicious registrations. Despite VirusTotal scans showing zero detections across 95 security vendors, the domain resolves to IP 104.21.73.203, which has been flagged in various blocklists and threat intelligence feeds. This discrepancy suggests the domain may be in early stages of abuse or evading detection.

Users and organizations should monitor traffic involving nekromancers.xyz closely and avoid clicking on links or providing credentials. PhishDestroy continues to track this domain’s activity and will update the status as more information becomes available. Immediate mitigation includes blocking access and educating users about potential phishing risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Nekromancers NFT Giveaway

## Domain Intelligence
- Registered: 2026-03-12 20:32:10
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: CN
- IP: 104.21.73.203
- Nameservers: earl.ns.cloudflare.com laura.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/F4g1rT13/97f36e890016.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7506dd06-9869-4f2e-be7c-4fe4ec5ae039
- PhishDestroy: https://phishdestroy.io/domain/nekromancers.xyz/
- LLM endpoint: https://phishdestroy.io/domain/nekromancers.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nekromancers.xyz/
Last updated: 2026-03-19