mixer-coin[.]to

This domain, mixer-coin.to, is flagged as a high-risk crypto scam impersonating a brand target identified as 'across'. Registered through the Government of Kingdom of Tonga on March 18, 2025, the domain remains active and resolves to IP address 176.97.124.200, hosted in Ukraine on AS6698 (Virtual Systems LLC). The page title is 'BTC Mixer | BTC Tumbler | Best Bitcoin Blender - Secure & Anonymous', and the site returns HTTP status 200, indicating it is live. VirusTotal analysis shows 9 of 95 security vendors flagging the domain, and it appears on 3 security blocklists. The SSL certificate is issued by Let's Encrypt (R12), and the server uses Nginx with HSTS enabled. Nameservers are ns1.zomro.net and ns2.zomro.ru. The Gridinsoft trust score is 0/100, and the domain is blocked by MetaMask, PhishDestroy, and SEAL. This domain is actively used for a crypto scam involving a Bitcoin mixing service, likely to deceive users into sending cryptocurrency under false pretenses. Defenders should block the domain at the network level, add it to blocklists, and monitor for related infrastructure. The exact mechanism of the scam (e.g., whether it involves a drainer or fake transaction) is not yet determined from available data. Users should avoid visiting the site or interacting with any content on it.