dyno[.]mintclubs[.]xyz

The domain dyno.mintclubs.xyz was registered on April 12, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Its authoritative name servers are dawn.ns.cloudflare.com and titan.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure. DNS resolution points to the IPv4 address 188.114.96.3, an address known to host multiple malicious resources in recent threat reports. VirusTotal analysis shows that 5 of 91 antivirus and URL scanning engines flag the domain as malicious, confirming a consensus of concern among a minority of scanners.

The domain is listed on one external security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a threat vector. The threat type associated with the domain is a crypto drainer, suggesting attempts to illicitly divert cryptocurrency assets from unsuspecting victims. Publicly available intelligence does not include a page title, SSL certificate details, HTTP response codes, or content analysis, leaving those aspects unverified. Consequently, the exact delivery mechanism and payload characteristics remain unknown.

The presence of Cloudflare name servers may obscure the true hosting environment, and the single blocklist entry provides limited visibility into broader detection coverage. Defenders should incorporate the domain into inbound and outbound filtering rules, block the resolved IP address 188.114.96.3, and monitor DNS queries for the domain and its name servers. Threat‑intel platforms should be updated to reflect the five positive detections on VirusTotal and the PhishDestroy block. Continuous re‑evaluation is advised as additional scanning results or content disclosures become available.