nswpuzcmn[.]com

This domain, nswpuzcmn.com, is flagged as a high-risk generic phishing threat, likely targeting cryptocurrency wallet credentials or financial data. Analysis indicates no direct brand impersonation, suggesting a broad-spectrum credential harvesting campaign rather than a targeted brand spoof. The absence of a known drainer kit fingerprint implies either custom-developed phishing tools or obfuscated malicious payloads designed to evade signature-based detection. Infrastructure analysis reveals critical technical indicators: the domain is registered through GMO Internet Group, Inc. d/b/a Onamae.com, with a creation date of March 28, 2026—an anomalous future timestamp indicative of bulk registration or domain generation algorithm abuse. Google Safe Browsing explicitly flags this domain as phishing, while VirusTotal records 13 detections out of 95 security vendors. The domain appears on a single security blocklist, suggesting early-stage detection or limited distribution. No associated IP addresses were provided, though historical resolutions may exist in passive DNS datasets. Current status indicates the domain has been taken offline, likely in response to detection by PhishDestroy or similar automated takedown mechanisms. While the immediate threat is mitigated, residual risk persists due to potential infrastructure reuse or registrar inaction. Users who interacted with this domain should assume credential compromise and initiate password resets, multi-factor authentication reviews, and transaction verification on all linked financial accounts. Monitoring for secondary payload delivery or follow-up phishing attempts is recommended, particularly for cryptocurrency-related services.