upload-txt[.]website

The domain upload-txt.website is classified as high-risk active generic phishing infrastructure. It registers in 24 AlienVault OTX pulses and appears on 2 security blocklists, with registration completed via NameCheap, Inc. on January 14, 2026. Gridinsoft assigns a trust score of 0/100 while VirusTotal shows 14 out of 95 vendors flagging the domain. The threat type is recorded as generic_phishing and the status remains active on the report date of July 12, 2026.

Infrastructure analysis reveals the domain resolves to IP 172.67.164.119. It employs an SSL certificate issued by Let's Encrypt and supports technologies PHP, Cloudflare, and HTTP/3. Specific blocklist entries include PhishDestroy and BLP-Malware. The page title returned is 404 Not Found, yet the domain continues to appear in threat feeds without indication of removal.

Uncertainty centers on the exact content currently delivered because the observed title suggests either a configuration change or partial remediation. No brand or kit details are present in the available data, and the original purpose cannot be confirmed solely from the title. The creation date in 2026 aligns with normal registration timelines and does not indicate anomaly.

Defenders should add both the domain and resolving IP 172.67.164.119 to internal blocklists, review network logs for connections to this address, and monitor for related NameCheap registrations exhibiting similar detection patterns. Ongoing tracking of the listed blocklist entries and OTX pulses is advised to maintain coverage while the domain retains active status.