minttsphere[.]com

The domain minttsphere.com is identified as a high-risk crypto drainer threat and is currently active. This domain impersonates a legitimate cryptocurrency service, potentially misleading users and compromising their digital assets.

Analysis indicates that minttsphere.com has been flagged by 2 of 95 security vendors on VirusTotal, suggesting a low level of detection but a significant threat. The domain was registered through OwnRegistrar, Inc. on May 15, 2025, and resolves to the IP address 102.212.247.171, which is located in the United States and associated with AS329278 Truehost Cloud Limited. The domain appears on 1 security blocklist, indicating its involvement in malicious activities. The SSL certificate is issued by Let's Encrypt / R13, which might give users a false sense of security. The page title 'Minttsphere - Welcome to Minttsphere' is consistent with legitimate cryptocurrency services, further enhancing the deceptive nature of the site.

Given the current active status of minttsphere.com, it is recommended that users avoid interacting with this domain. Network administrators should consider blocking the IP address 102.212.247.171 to prevent any potential crypto drainer attacks. Additionally, users should verify the legitimacy of any cryptocurrency service by cross-referencing with official sources and using reliable security tools to monitor for suspicious activities.