5minpod[.]com

5minpod.com is currently flagged as a generic phishing infrastructure. The domain was registered on March 28, 2023 through Namecheap Inc and is hosted on the nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. DNS resolution points to the address 158.94.209.40, which remains active as of the report date (July 21, 2026). The domain appears on a single security blocklist and is specifically blocked by the PhishDestroy feed, indicating that at least one trusted sinkhole has identified malicious activity associated with it.

VirusTotal records show that the domain has been submitted to 95 scanning engines; none of the engines returned a detection at the time of analysis. No evidence of SSL/TLS certificates, HTTP response codes, or page titles has been published, and the site does not currently appear in public Safe Browsing or Open Threat Exchange listings. Consequently, the visibility of the payload or lure employed by the campaign is unknown, and it cannot be confirmed whether the domain is actively delivering phishing pages or merely reserved for future use.

Defenders should continue to monitor DNS queries for 5minpod.com and its resolved IP, enforce outbound filtering to block traffic to the address, and consider adding the domain to internal blocklists. Because the domain is hosted on a reputable registrar and uses generic Namecheap hosting, a rapid takedown request may be less effective; however, coordinated abuse reporting to Namecheap’s abuse team, along with sharing the observed indicators (domain, IP, nameservers) with threat‑intel sharing platforms, will increase the likelihood of remediation. Ongoing observation of any changes in the domain’s registration status, additional blocklist appearances, or emergence of detection signatures is recommended to reassess the risk posture.