minersworldcoin[.]xyz

The domain www.minersworldcoin.xyz has been identified as a generic phishing threat. There is no specific brand or drainer kit associated with this domain, but it poses a significant risk due to its elevated threat level and multiple detections.

Analysis indicates that VirusTotal has flagged this domain with a score of 5/95, suggesting that while a minority of security vendors detect it as malicious, there is still a notable risk. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 104.21.81.45. It was created on April 04, 2026, and currently appears on 3 security blocklists, including MetaMask, PhishDestroy, and SEAL. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust in its legitimacy.

The current status of the domain is offline, which has mitigated the immediate risk. However, the domain's presence on multiple blocklists and its low trust score suggest that it has been active in malicious activities. SOC teams should monitor for any reactivation of the domain and ensure that endpoints and network configurations are updated to block any future attempts. While the domain is currently offline, the infrastructure and techniques used by the attackers may still pose a residual risk, and further investigation is recommended to identify any related domains or IPs.