nft-claims[.]xyz
nft-claims.xyz — Kesalahan server (HTTP 502). Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 4/93 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain nft-claims.xyz was registered on February 24, 2026 through NiceNIC International Group Co., Limited and is currently listed as taken offline. Technical inspection shows the site resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain uses the Cloudflare nameservers elle.ns.cloudflare.com and louis.ns.cloudflare.com, but no TLS certificate was observed, leaving the connection unencrypted. The HTTP response includes the page title "Just a moment..."; no further page content has been captured, indicating that the site may have been serving a placeholder or redirect before being shut down.
Malware intelligence platforms have flagged the domain as a crypto scam, with four of ninety-three VirusTotal scanners raising alerts. Additionally, the domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy service. Reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. Although the domain lacks an active SSL certificate, its association with Cloudflare infrastructure and the observed detection activity suggest purposeful use of reputable hosting to obscure malicious activity.
Defenders should add nft-claims.xyz and its resolving IP 188.114.96.3 to outbound and inbound deny lists, monitor for any resurgence of the domain, and watch for related sub‑domains that may reuse the same nameserver configuration. Continuous re‑scanning of the host IP is advised, as threat actors frequently pivot to adjacent IP ranges within the same Cloudflare ASN. Given the limited publicly available artifacts, the full payload or attack vector remains uncertain, but the existing indicators confirm the domain’s involvement in a crypto‑draining operation and warrant continued vigilance.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-19 03:14:50 UTC
Intelijen Forensik
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260224-F969D1 Recipient: abuse@nicenic.net, abuse@gen.xyz, compliance@icann.org Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive