j3kwivsaxd5xu37m5knelcerglq6jq22gxvnyrn4et7xoewdx7qa[.]arweave[.]net

Analysis of the domain j3kwivsaxd5xu37m5knelcerglq6jq22gxvnyrn4et7xoewdx7qa.arweave.net indicates a high-risk generic phishing threat, currently active as of July 18, 2026. The domain was registered on January 25, 2018, through NAMECHEAP INC, and resolves to the IP address 195.181.170.18. It appears on two security blocklists and is blocked by MetaMask and SEAL, suggesting malicious intent targeting users of cryptocurrency or financial platforms. The SSL certificate is issued by Let's Encrypt, which is consistent with both legitimate and malicious sites. The page title 'Loading…' provides no clear indication of the specific content or target, though the presence on blocklists and the domain's infrastructure suggest it is likely involved in phishing or credential harvesting. No further details about the scam type, brand impersonation, or specific attack vector are available at this time. Defenders should treat this domain as hostile and consider blocking it at the network level, particularly in environments where cryptocurrency or financial transactions occur. Monitoring for connections to 195.181.170.18 may also help identify compromised endpoints. The domain's age and continued activity indicate it remains a persistent threat.