# ttempopunks.xyz — SUSPICIOUS

> ttempopunks.xyz is a crypto drainer phishing domain with 0 detections on VirusTotal. Registered via Name.com, it poses as TempO Punks. Verify before interacting.

## Summary
ttempopunks.xyz is currently under investigation for crypto drainer activity, with an active status as of seed 82b919. This domain mimics the TempO Punks brand, a popular NFT collection, to deceive users into connecting wallets or transferring cryptocurrency assets. The threat involves unauthorized fund drainage via fraudulent smart contract interactions or fake minting pages.  

This domain was flagged by 0 of 95 VirusTotal vendors, indicating no current detection signatures despite its malicious intent. It is registered through Name.com, Inc., resolves to IP address 216.198.79.65, and was created on April 03, 2026. The domain utilizes a Let's Encrypt SSL certificate, which does not validate its legitimacy. Due to its recent creation and low detection rate, it remains a high-risk vector for unsuspecting users.  

The current status of ttempopunks.xyz is under investigation, but its recent registration and lack of detections warrant immediate caution. Security researchers and users are advised to avoid interacting with this domain or any linked URLs. If this domain has been accessed, disconnect wallets immediately, revoke any unauthorized permissions, and scan systems for malware. Block the domain at the network level and report indicators to threat intelligence platforms to prevent further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-03 11:49:08
- Registrar: Name.com, Inc.
- IP: 216.198.79.65

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ttempopunks.xyz
- PhishDestroy: https://phishdestroy.io/domain/ttempopunks.xyz/
- LLM endpoint: https://phishdestroy.io/domain/ttempopunks.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ttempopunks.xyz/
Last updated: 2026-04-07