speed-miner[.]top

The domain speed-miner.top has been identified as a crypto wallet drainer phishing site designed to deceive users into disclosing wallet credentials and transferring cryptocurrency assets to attacker-controlled addresses. Analysis indicates the site employs social engineering tactics, including a fabricated message notification ("1 new message") to prompt immediate user interaction. As of the latest assessment, the domain has been taken offline, though residual risk remains for users who may have engaged with it prior to deactivation. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NameSilo, LLC, and resolved to the IP address 151.80.4.227. It is flagged by 5 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on two security blocklists, including PhishDestroy and OISD. Detected technologies include PHP, Bootstrap, Apache HTTP Server, jQuery, and Google Hosted Libraries, suggesting a structured and scalable phishing framework capable of rapid deployment and evasion. Current status confirms the domain is offline, but historical exposure may persist for affected users. Organizations and individuals are advised to block the domain and associated IP at the network perimeter, revoke any credentials or wallet access shared with the site, and monitor for unauthorized transactions. Users should verify the legitimacy of any cryptocurrency-related communication by cross-referencing official sources and enabling multi-factor authentication on all financial accounts. Security teams are encouraged to review logs for connections to 151.80.4.227 and the domain name to identify potential compromise indicators.