magic[.]eden-nft[.]cc

This domain, magic.eden-nft.cc, was created on 21 February 2026 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The site is currently taken offline, and its authoritative nameservers resolve to expired-ns1.niceisp.com and expired-ns2.niceisp.com, indicating that the hosting infrastructure is no longer active. The page title returned by the server, www.magic.eden-nft.cc, matches the fully qualified domain name, which is a typical indicator of a placeholder or minimal page used for malicious purposes. The domain is classified as a brand‑impersonation campaign targeting Polygon, as indicated by the supplied intelligence.

Detection services have flagged the domain on two public blocklists, specifically PhishDestroy and ScamSniffer, and eight additional security vendors have listed it as malicious. VirusTotal analysis shows that nine out of ninety‑three scanners identified the domain as malicious, reinforcing the suspicion of a phishing or credential‑harvesting operation. The elevated risk rating reflects the combination of brand impersonation, active blocklisting, and multi‑vendor detections.

No additional technical artifacts such as IP address, ASN, SSL certificate details, or HTTP response codes are available, limiting deeper infrastructure profiling. Defenders should ensure that the domain is added to internal DNS blocklists and firewall deny lists, monitor the registrar NICENIC for any re‑registration attempts, and watch for any resurgence of the expired nameservers. Continuous threat‑intel feeds should be consulted for potential re‑use of the domain or related indicators, and any inbound traffic to magic.eden-nft.cc should be logged and investigated for possible credential‑theft attempts.