mines-signals-bot[.]com

The domain mines-signals-bot.com poses an elevated risk due to brand impersonation targeting Telegram. This phishing site masquerades as a legitimate Telegram bot for the 'Mines' game, but its true intent is to harvest user credentials or spread malware. The threat is amplified by the lack of any SSL certificate, indicating no encryption for data transmission, and its registration through REGRU-RU, a Russian registrar often associated with malicious domains.

Technical indicators reveal a concerning profile. VirusTotal shows only 1 out of 95 security vendors flagged the domain, suggesting it evaded most detection engines. The domain was created on July 30, 2025, and resolves to IP 37.252.1.132. It appears on one security blocklist, yet the low detection rate underscores the need for user vigilance. The page title, 'Mines — Бот сигналов для игры Мины от 1win,' explicitly references the 1win gambling platform, furthering the deception. PhishDestroy identified this domain as part of a brand impersonation campaign against Telegram, with the unique seed ceac65.

Users who encounter mines-signals-bot.com should avoid any interaction, particularly entering Telegram login credentials, personal information, or financial details. Since the site is now offline, no immediate action is required, but users should monitor accounts for suspicious activity. For future safety, always verify domain authenticity by checking official Telegram channels or sources, and use anti-phishing tools that detect brand impersonation. Report any similar domains to security teams or relevant authorities to prevent further attacks.