minercn[.]net

This domain, minercn.net, is identified as a high-risk cryptocurrency phishing operation designed to deceive users into disclosing wallet credentials or authorizing malicious transactions. Analysis indicates no direct association with a specific legitimate brand, though its infrastructure and naming convention suggest an intent to impersonate cryptocurrency-related services. The domain exhibits characteristics consistent with wallet-drainer kits, which are commonly deployed to siphon digital assets from compromised accounts. Infrastructure analysis reveals the following technical indicators: the domain resolves to the IP address 188.114.96.3 and was registered on May 28, 2025, through TUCOWS.COM, CO. Security vendor detections on VirusTotal report a score of 13/95, indicating moderate consensus on its malicious nature. The domain appears on four security blocklists and is actively blocked by multiple threat intelligence feeds, including MetaMask and OISD. Additionally, the site employs Cloudflare and HTTP/3, which are frequently leveraged to obfuscate hosting origins and evade detection. As of the latest assessment, minercn.net has been taken offline, likely in response to its inclusion on security blocklists and detection by automated threat mitigation systems. However, the domain remains a residual risk due to its recent creation and the persistence of similar phishing infrastructure. Users who interacted with the domain prior to its takedown are advised to audit their wallet transactions, revoke any suspicious authorizations, and monitor for unauthorized access. Organizations should update their blocklists to include this domain and its associated IP to prevent future exposure.