mixedcryptoarts[.]com

Analysis of mixedcryptoarts.com confirms its classification as an active crypto drainer phishing domain, operational as of July 12, 2026. The domain was registered on November 23, 2024, through NAMECHEAP INC and currently resolves to IP address 82.25.83.66, hosted on infrastructure located in Great Britain under Hostinger. The site presents a page title of 'Mixed Crypto Arts - Revolutionary Blockchain Gaming,' suggesting a focus on cryptocurrency or blockchain-related deception. Infrastructure analysis reveals the use of Cloudflare, LiteSpeed, and multiple third-party libraries including Chart.js, Bootstrap, jQuery, and jsDelivr, which are consistent with phishing sites leveraging modern web technologies to appear legitimate. MX records indicate email routing through mx1.titan.email and mx2.titan.email, which may be used for credential harvesting or further phishing campaigns. The domain is flagged on one security blocklist and has a Scamadviser trust score of 37/100, while Gridinsoft assigns it a trust score of 0/100. Three of 91 security vendors on VirusTotal detect the domain as malicious. The SSL certificate is issued by Let's Encrypt (R12), providing HTTPS encryption, which is commonly exploited by threat actors to evade detection. Nameservers are set to ns1.dns-parking.com and ns2.dns-parking.com, a configuration often associated with low-cost or disposable hosting. No specific brand impersonation is confirmed beyond the page title, and the exact content of the site remains unanalyzed. However, the classification as a 'Crypto Drainer' in threat intelligence indicates the domain is likely designed to trick users into connecting wallets or entering private keys, resulting in unauthorized fund transfers. Defenders should block the domain and its resolving IP at the perimeter, monitor for connections to 82.25.83.66, and investigate any associated email traffic routed through titan.email infrastructure.