5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a[.]arweave[.]net

PhishDestroy has identified the domain 5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a.arweave.net as a generic phishing threat currently under investigation. The domain does not impersonate any specific brand and no drainer kit has been confirmed, but its structure suggests it may be used for credential harvesting or malware delivery. The threat type is generic_phishing, indicating a broad phishing campaign rather than a targeted attack on a particular organization.

Technical indicators reveal that the domain has a VirusTotal score of 3/95, meaning no security vendors have flagged it as malicious yet. It was registered through NameCheap, Inc. and resolves to IP address 79.127.216.203. The SSL certificate is issued by Let's Encrypt (E8). The domain's creation date is not provided in the intelligence, but its current status is offline. Google Safe Browsing status and blocklist counts are not available from the given data; however, the lack of detections suggests it may not have been widely reported.

As of the latest check, the domain has been taken offline, mitigating immediate risk. Response actions include monitoring for related domains and updating blocklists. However, the remaining risk is that the threat actors may deploy similar domains in the future. Users are advised to avoid clicking any links from suspicious emails or messages referencing this domain, and to report any encountered instances to security teams. PhishDestroy continues to track this threat and will update the status as new intelligence emerges.