# nftxjups.com — MALICIOUS

> nftxjups.com is linked to crypto draining risks. Avoid interacting with this domain and stay alert to protect your crypto assets from potential theft.

## Summary
PhishDestroy identifies nftxjups.com as a medium risk domain associated with crypto drainer activity. This classification highlights the potential for malicious attempts to steal cryptocurrency through deceptive means.

The domain nftxjups.com was registered recently, on February 21, 2026, and has appeared on three separate security blocklists. VirusTotal flags this domain by five security vendors out of 95 scanned, indicating some detection but not widespread consensus. It resolves to the IP address 104.21.64.1 and is registered via NiceNIC International Group Co., Limited. The page title found during analysis is "Suspected phishing site | Cloudflare," reinforcing suspicion of malicious intent.

Currently, nftxjups.com is offline, reducing immediate threat exposure. Users are advised to avoid this domain entirely and remain cautious when accessing unfamiliar crypto-related sites. Employing updated security software and consulting reliable phishing databases like PhishDestroy can help prevent falling victim to crypto draining scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.64.1
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["grannbo.ns.cloudflare.com", "vicente.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01994095-9fc7-77be-b60d-0019915e038e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1e0806af-9212-442c-bdeb-27b39a9cc4ca
- PhishDestroy: https://phishdestroy.io/domain/nftxjups.com/
- LLM endpoint: https://phishdestroy.io/domain/nftxjups.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nftxjups.com/
Last updated: 2026-03-19