mintronft[.]com

Analysis of mintronft.com, observed on July 24, 2026, indicates that the domain is part of an active crypto‑drainer operation. The site was created on February 21, 2026 and presently resolves to the IPv4 address 198.251.83.106, which is registered to AS53667 (FranTech Solutions) in the United States. An SSL certificate labelled R10 is present, confirming that the site employed HTTPS before being taken offline. The observed page title, "MINTRO - NFT Marketplace," aligns with the reported scam type of a cryptocurrency‑related fraud, suggesting the domain was used to lure victims into a fraudulent NFT marketplace.

The domain appears on four independent security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating coordinated detection across multiple threat‑intelligence feeds. VirusTotal analysis recorded a single positive detection out of 93 scanned security vendors, reinforcing the malicious classification despite a relatively low detection count. No additional technical artifacts such as malware hashes, command‑and‑control endpoints, or phishing landing‑page screenshots were available at the time of analysis. The short‑lived nature of the domain (approximately five months from registration to takedown) and its rapid inclusion on blocklists indicate a targeted campaign that likely leveraged the NFT hype to extract cryptocurrency from unsuspecting users.

Defenders should block both the domain and its resolved IP address at network perimeter devices, update URL filtering policies to include the listed blocklists, and monitor for any residual traffic to the IP range owned by FranTech Solutions. Organizations handling cryptocurrency transactions should increase user awareness of fraudulent NFT platforms and enforce multi‑factor authentication for wallet access. Because the site has been taken offline, retrospective forensic collection (e.g.