# oethgift.com — MALICIOUS

> PhishDestroy warns of oethgift.com, a crypto drainer flagged by 5/95 vendors on VirusTotal. Avoid this domain to protect your assets. Report phishing now!

## Summary
PhishDestroy has identified oethgift.com as a high-risk domain actively engaged in cryptocurrency draining. This site presents a significant threat to users by attempting to steal their cryptocurrency assets through deceptive means. The specific mechanisms employed may include fake token offerings or other scams designed to trick users into connecting their wallets and approving malicious transactions.

Technical indicators for oethgift.com include a VirusTotal score of 5/95, indicating that multiple security vendors recognize the site as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and created on May 08, 2024. It resolves to the IP address 104.21.54.57 and utilizes an SSL certificate issued by Google Trust Services. The domain is also present on 2 security blocklists.

Currently, oethgift.com is active and poses an elevated risk to users. It has been blocked by Enkrypt and ScamSniffer. Users should avoid interacting with this domain or providing any personal or financial information. Further investigation and monitoring are recommended to mitigate the ongoing threat.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-05-08 21:00:14
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.54.57

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["Enkrypt", "ScamSniffer"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/41859f64-347e-426b-a200-0aedfb2d8e5a
- PhishDestroy: https://phishdestroy.io/domain/oethgift.com/
- LLM endpoint: https://phishdestroy.io/domain/oethgift.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/oethgift.com/
Last updated: 2026-03-27