ttempopunks[.]xyz

ttempopunks.xyz is currently under investigation for crypto drainer activity, with an active status as of seed 82b919. This domain mimics the TempO Punks brand, a popular NFT collection, to deceive users into connecting wallets or transferring cryptocurrency assets. The threat involves unauthorized fund drainage via fraudulent smart contract interactions or fake minting pages.

This domain was flagged by 6 of 95 VirusTotal vendors, indicating no current detection signatures despite its malicious intent. It is registered through Name.com, Inc., resolves to IP address 216.198.79.65, and was created on April 03, 2026. The domain utilizes a Let's Encrypt SSL certificate, which does not validate its legitimacy. Due to its recent creation and low detection rate, it remains a high-risk vector for unsuspecting users.

The current status of ttempopunks.xyz is under investigation, but its recent registration and lack of detections warrant immediate caution. Security researchers and users are advised to avoid interacting with this domain or any linked URLs. If this domain has been accessed, disconnect wallets immediately, revoke any unauthorized permissions, and scan systems for malware. Block the domain at the network level and report indicators to threat intelligence platforms to prevent further exploitation.