money[.]678mining[.]top

This domain, money.678mining.top, is flagged as a generic phishing site targeting cryptocurrency users under the guise of USDC mining. The page title, USDC-Mining, suggests an attempt to deceive victims into engaging with fraudulent cryptocurrency services, likely aiming to steal credentials or digital assets. No specific drainer kit signatures have been confirmed, but the infrastructure aligns with common cryptocurrency phishing tactics observed in similar campaigns. Analysis indicates the domain was registered through Dominet (HK) Limited on May 12, 2026, and resolves to the IP address 172.67.129.50. It is currently detected by 9 out of 95 security vendors on VirusTotal, with one additional security blocklist flagging it as malicious. The domain employs Cloudflare for hosting and protection, including Cloudflare Browser Insights and HTTP/3, which may obscure further analysis. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Google Safe Browsing (GSB) status is not explicitly listed, but the presence on multiple blocklists confirms its malicious classification. The domain remains active and poses an elevated risk to users, particularly those involved in cryptocurrency transactions. Response actions should include blocking the domain at the network level, monitoring for related infrastructure, and alerting potential targets through security awareness channels. Despite its detection by multiple security vendors, the domain's continued operation underscores the need for vigilance, as phishing campaigns of this nature often evolve rapidly to evade mitigation efforts. Users are advised to verify cryptocurrency-related offers through official channels and avoid interacting with unsolicited mining or investment opportunities.