anchor-mint[.]com

The domain anchor-mint.com has been identified as a crypto drainer, a threat type designed to siphon cryptocurrency from victim wallets. Analysis confirms the domain is currently offline, though prior activity indicates active exploitation attempts. No legitimate brand impersonation is observed; the threat operates under the guise of a fabricated advisory service titled 'Anchor Mint Advisory.' Infrastructure analysis reveals the domain was registered on December 31, 2025, through Squarespace Domains LLC, a detail that aligns with known patterns of short-lived malicious registrations. It resolves to the IP address 198.49.23.145 and employs a Let's Encrypt SSL certificate, a common tactic to lend superficial legitimacy. Detection metrics show the domain was flagged by 2 of 95 security vendors on VirusTotal and appears on three distinct blocklists. Additional trust scoring systems, such as Gridinsoft, assign a score of 0/100, reinforcing its malicious classification. Technologies detected include Squarespace Commerce, Proton Mail, and Stimulus, which may have been leveraged to facilitate the attack or evade detection. Current status indicates the domain has been taken offline, though similar infrastructure may re-emerge under alternate names. Users are advised to verify wallet connections and revoke access to any suspicious domains, particularly those mimicking advisory or financial services. Security teams should monitor for related indicators, including the IP address 198.49.23.145 and domains registered via Squarespace Domains LLC with recent creation dates. Proactive blocking of known malicious infrastructure and continuous monitoring of wallet interactions are recommended to mitigate further exposure.