mt0421[.]400518[.]com

This domain is flagged as a high-risk generic phishing threat specifically designed to impersonate a cryptocurrency mining foundation. Analysis indicates the site employs social engineering tactics to deceive users into engaging with fraudulent blockchain-related services, likely aiming to steal credentials or digital assets through fake investment opportunities or mining schemes. Infrastructure analysis reveals the domain mt0421.400518.com was registered on May 13, 2024, through Gname.com Pte. Ltd., a registrar frequently associated with malicious domains. It resolves to the IP address 188.114.97.3, which is part of a network infrastructure commonly leveraged for phishing campaigns. Detection metrics show 16 out of 95 security vendors on VirusTotal flag the domain as malicious, while it appears on two distinct security blocklists, including PhishDestroy and ScamSniffer. The domain has been assigned a trust score of 0/100 by Gridinsoft, further corroborating its malicious nature. Technologies detected on the site include Facebook Pixel, Cloudflare Browser Insights, and Cloudflare itself, alongside HTTP/3, suggesting an attempt to mimic legitimate service infrastructure while evading detection. Mitigation against this specific threat type requires heightened vigilance when encountering cryptocurrency-related offers or mining foundations online. Users should verify the legitimacy of such platforms by cross-referencing official sources and avoiding interaction with domains registered through high-risk registrars or those with recent creation dates. If engagement with the domain has already occurred, immediate steps should include revoking any connected wallet permissions, resetting credentials for associated accounts, and monitoring for unauthorized transactions. Network-level blocking of the domain and its resolving IP address is recommended to prevent further exposure.