tonminepro[.]com

The domain tonminepro.com is identified as a generic phishing site targeting users of cryptocurrency mining services, specifically impersonating TON-based mining platforms. Analysis indicates the domain is designed to harvest login credentials, private keys, or financial information under the guise of a legitimate mining portal. As of the latest assessment, the domain has been taken offline, though residual threats may persist through cached pages or secondary distribution channels. Infrastructure analysis reveals the domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with historical associations to high-risk domains. It resolves to the IP address 104.21.39.230, a Cloudflare-protected endpoint, which obscures direct server attribution. The domain is flagged by 14 of 95 security vendors on VirusTotal, with only one entry on a public blocklist, suggesting limited initial detection coverage. Additional technical indicators include a Let’s Encrypt SSL certificate, use of PHP, Bootstrap, and jQuery frameworks, and HTTP/3 protocol support. The Scamadviser trust score for this domain is 1 out of 100, reinforcing its classification as a high-risk entity. Current status confirms tonminepro.com is offline, though the domain remains registered and could be reactivated. Users who interacted with the site are advised to revoke any exposed credentials, monitor financial accounts for unauthorized transactions, and scan affected devices for malware. Organizations should update blocklists to include the domain and associated IP, while security teams are encouraged to review logs for connections to 104.21.39.230. Given the domain’s recent creation and low detection rates, heightened vigilance is recommended for similar cryptocurrency-themed phishing campaigns.