artewex[.]com

PhishDestroy identifies artewex.com as a suspected crypto drainer domain currently under investigation for generic phishing activity. The domain was registered through Fewmoretaps OU d/b/a Trustname.com on April 06, 2026, and resolves to IP address 176.124.206.61. No specific cryptocurrency drainer kit has been attributed to this domain in current threat intelligence feeds, though its registration profile and hosting infrastructure suggest alignment with known drainer operations targeting digital asset users. This domain exhibits concerning technical indicators that warrant heightened scrutiny. VirusTotal currently reports 0 detections out of 95 scanning engines, indicating it remains under the radar of mainstream detection systems. The domain was created on April 06, 2026, and is registered through Fewmoretaps OU d/b/a Trustname.com, a registrar known for accommodating high-risk registrations. It resolves to IP 176.124.206.61 and holds a valid Let's Encrypt SSL certificate, which are common tactics used by malicious actors to establish trustworthiness. Google Safe Browsing (GSB) status is currently unflagged, and no blocklist entries have been recorded against this domain as of the latest intelligence cycle. As of this assessment, artewex.com remains in an active status with a risk level classified as under_investigation. Security researchers are encouraged to monitor this domain closely for emerging patterns or additional malicious infrastructure linkages. Users should exercise extreme caution and avoid visiting this domain or engaging with any associated services. The current lack of detections combined with its recent registration suggests potential for rapid escalation in malicious activity. Security teams are advised to implement network-level blocking for this IP and domain while continuing forensic analysis to determine its full scope of operation and potential impact on crypto users.