ashveilmining[.]org

This domain is flagged as a high-risk cryptocurrency phishing threat and remains active as of July 12, 2026. Registered on February 21, 2026 through Ultahost, Inc., it resolves to IP address 159.100.6.5 hosted in Germany on AS214036 (Ultahost, Inc.). The domain uses nameservers ns1 through ns4.ultahost.com. Infrastructure analysis reveals a SSL certificate issued to globaloffshoremargin.com, a separate domain that may be associated with the same threat actor. VirusTotal data shows 12 out of 95 security vendors flagging this domain, and it appears on one blocklist (PhishDestroy). Google Safe Browsing flags the domain for SOCIAL_ENGINEERING, indicating it is designed to trick users into revealing sensitive information. The page title currently displays 'Privacy error,' which may be a browser-generated warning or a placeholder page, making the exact phishing content unknown without live inspection. AlienVault OTX records one threat intelligence pulse referencing this domain, confirming its inclusion in a known threat campaign. The Gridinsoft trust score of 0/100 further corroborates the high-risk assessment. Defenders should block the domain and IP at network boundaries, monitor for related subdomains or IP changes, and investigate Ultahost for potential abuse reporting. Given the cryptocurrency scam type, users may be targeted for wallet credentials or fake mining investments. No other technical indicators, such as specific phishing kit or brand impersonation, are available in the intelligence data. The domain remains active and should be treated as an active threat.