minepiece[.]top

The domain minepiece.top was observed on July 12, 2026 and is classified as a high‑risk generic phishing site. The indicator set assigns a risk level of high and marks the domain as active. The page title returned by the web server is “MinePiece - ماين بيس”, which aligns with the reported phishing category.

Infrastructure analysis shows the domain resolves to the IP address 104.21.64.1, which belongs to AS13335 operated by Cloudflare, Inc. The hosting location is the United States. Authoritative name servers are karina.ns.cloudflare.com and kirk.ns.cloudflare.com, confirming that the domain is fully delegated through Cloudflare’s DNS service.

Technical fingerprinting reveals the presence of Varnish, GitHub Pages, Fastly, Cloudflare and HTTP/3 in the response chain, indicating a layered CDN and caching configuration. The SSL certificate is issued by Google Trust Services under the WE1 designation, providing a valid TLS handshake. The domain was registered through NameCheap, Inc. on August 01, 2025.

Reputation data shows a Gridinsoft trust score of 0 out of 100 and a single blocklist entry from PhishDestroy, which continues to list the domain as blocked. VirusTotal scans returned 2 positive detections out of 95 security vendors, confirming that independent scanners have flagged the domain as malicious. No additional public indicators such as malware hashes or command‑and‑control endpoints are currently available.

Defenders should prioritize immediate blocking of minepiece.top at perimeter and DNS layers, and incorporate the IP 104.21.64.1 into network‑level deny lists. Continuous monitoring of the associated name servers and any newly observed sub‑domains is advised, as the current evidence suggests an active phishing infrastructure that may evolve. Incident response teams should also consider sharing the indicator set with threat‑intel communities to improve collective detection.