# nvmp13.live — SUSPICIOUS

> nvmp13.live impersonates a login portal; flagged by 1 of 95 VirusTotal vendors. Verify safety on PhishDestroy before entering any credentials or crypto wallet.

## Summary
PhishDestroy identifies nvmp13.live as an active cryptocurrency drainer posing as a legitimate service login interface.

According to the latest telemetry, this domain resolves to IP 188.114.96.3, was registered on January 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is flagged by 1 of 95 VirusTotal security vendors. It holds a valid Let’s Encrypt SSL certificate, suggesting an attempt to appear trustworthy while facilitating credential harvesting and unauthorized cryptocurrency transfers.

The domain remains active and poses an elevated risk due to its use of social engineering tactics targeting cryptocurrency users. PhishDestroy recommends users immediately avoid interacting with nvmp13.live and verify any suspicious links using the PhishDestroy platform. If you have already entered wallet credentials or connected a wallet, revoke permissions immediately via your wallet’s interface and transfer remaining assets to a secure address. Monitor account activity closely and report suspicious transactions to your wallet provider and relevant authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-22 16:17:53
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bc54e3ae-abc2-4798-99f7-fb8fc396aa4f
- PhishDestroy: https://phishdestroy.io/domain/nvmp13.live/
- LLM endpoint: https://phishdestroy.io/domain/nvmp13.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nvmp13.live/
Last updated: 2026-03-23