taxbitmining[.]cc

Analysis of taxbitmining.cc indicates an active high‑risk crypto scam infrastructure. The domain was registered on June 09, 2026 through Dynadot Inc and immediately began serving HTTP 200 responses protected by a Let’s Encrypt (R12) certificate. The page title returned is taxbitmining.cc, matching the host name. Content delivery is powered by Nginx and incorporates common web components including Bootstrap, jQuery, Popper, OWL Carousel, YouTube embeds, and JivoChat, suggesting a typical credential‑harvesting front end. VirusTotal scans show eight of ninety‑one security vendors flagging the domain, and AlienVault OTX references the host in four separate threat‑intel pulses. Reputation metrics are poor, with a Gridinsoft trust score of 0 / 100 and inclusion on one security blocklist. The domain resolves to IP 149.56.250.50, hosted in California under the Securelayer network. PhishDestroy has already blocked the address. While the exact phishing page layout is not publicly documented, the convergence of a recent registration, low trust scores, multi‑vendor detections, and known crypto‑scam classification warrants immediate containment. Defenders should block DNS resolution for taxbitmining.cc, add the IP to network‑level deny lists, monitor for outbound connections to the listed IP, and update endpoint detection rules to flag any traffic matching the observed technology stack. Continuous re‑evaluation is recommended as additional indicators may emerge.