app-nitrofrogtokens[.]xyz

Analysis indicates that app-nitrofrogtokens.xyz is a high-risk domain associated with a crypto scam. The domain was created on March 13, 2026, and is currently active. It resolves to IP address 188.114.97.3, which is located in the United States and is managed by Cloudflare, Inc. The domain uses Cloudflare services and HTTP/3 technology, suggesting a modern and potentially sophisticated infrastructure. The site's page title displays a '504: Gateway time-out' error, indicating that the server may be down or intentionally configured to avoid detection. The domain is flagged by one security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0 out of 100, reflecting a significant lack of trust. The SSL certificate is issued by Let's Encrypt, a common practice for phishing sites to appear more legitimate. Given the high risk and active status, defenders should block this domain and monitor for any related malicious activities. Further investigation is recommended to identify the specific nature of the crypto scam and to determine if the domain is part of a larger campaign.