# t83912-crypto.com — SUSPICIOUS

> t83912-crypto.com shows signs of phishing risk. Newly created domain flagged for caution and ongoing investigation. Stay alert and protect your crypto assets.

## Summary
PhishDestroy identifies t83912-crypto.com as an active domain presenting a generic phishing threat. The risk level remains under investigation due to limited current detection but the domain's activity and characteristics raise concerns for potential phishing attempts targeting cryptocurrency users.

Although VirusTotal reports zero detections from any security vendors, t83912-crypto.com’s recent creation date (March 2, 2026) and registration through NICENIC INTERNATIONAL GROUP CO., LIMITED contribute to its suspicious profile. The domain resolves to IP address 104.21.60.76, which is associated with infrastructure commonly exploited for phishing. These factors suggest the domain is likely used in deceptive schemes, despite no immediate flagging by mainstream antivirus or URL scanning services.

Users and security teams should monitor t83912-crypto.com closely and apply caution when encountering it in emails or web links. PhishDestroy recommends blocking or restricting access to this domain until further intelligence clarifies its intent. The domain remains active, and proactive mitigation efforts are advised to protect users from potential credential theft or financial fraud related to cryptocurrency.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 503)
- Target brand: Crypto.com
- Page title: Security Check

## Domain Intelligence
- Registered: 2026-03-06 21:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.60.76
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["cesar.ns.cloudflare.com", "ines.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc4c5-aed3-775d-8da6-27e68b93218f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e9230558-246f-486a-ac52-0cd95896818c
- Wayback Machine: https://web.archive.org/web/https://t83912-crypto.com
- PhishDestroy: https://phishdestroy.io/domain/t83912-crypto.com/
- LLM endpoint: https://phishdestroy.io/domain/t83912-crypto.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/t83912-crypto.com/
Last updated: 2026-03-19