mineaml[.]com

The domain mineaml.com was registered on February 21, 2026 through GoDaddy.com, LLC and remains active as of the report date. It is listed in a single security blocklist and has been flagged by PhishDestroy, indicating ongoing malicious use.

Infrastructure analysis shows the domain resolves to 172.67.142.52, an IP owned by AS13335 Cloudflare, Inc. in the United States. Authoritative nameservers are alexia.ns.cloudflare.com and patryk.ns.cloudflare.com, and the MX record points to mail2.mineaml.com with priority 10. The site is served behind Cloudflare and negotiates HTTP/3 connections.

The web server returns HTTP status 526, reporting an “Invalid SSL certificate”. The presented certificate is issued by Google Trust Services under the WE1 designation, but the mismatch triggers the error. Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal records a single vendor detection out of 95 scans, reinforcing the suspicion of abuse.

Threat classification is generic_phishing with a specific cryptocurrency scam focus. The page title “mineaml.com | 526: Invalid SSL certificate” provides no further insight into the payload or victim lure, and no visual or content analysis has been performed. Consequently, the exact phishing lure, credential collection method, and victim demographics remain unknown.

Defenders should block the domain and its associated IP address at network perimeters, add the MX host to mail filtering rules, and monitor for any future DNS changes. Given the reliance on Cloudflare's infrastructure, similar domains may share the same nameserver set, so rule sets that incorporate alexia.ns.cloudflare.com and patryk.ns.cloudflare.com can reduce exposure. Continuous re‑scanning with multi‑vendor scanners is advised to capture additional detections as they appear.