user[.]artriangle[.]net

user.artriangle.net Safety Check — Phishing Detected

PhishDestroy identifies user.artriangle.net as an active crypto drainer phishing domain impersonating the legitimate AR Triangle platform. The threat involves a fraudulent webpage designed to deceive users into connecting cryptocurrency wallets, enabling unauthorized asset transfers to attacker-controlled addresses. The campaign remains active as of the latest investigation, with no takedown actions recorded.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating undetected malicious activity. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to IP 104.21.67.64, and was created on January 28, 2026. The site utilizes a Google Trust Services SSL certificate, which does not guarantee legitimacy. Additional blocklist checks confirm no prior detections, highlighting the emergent nature of this threat.

Current status shows an ongoing risk with zero vendor detections, suggesting evasion of automated defenses. Users should immediately avoid interacting with this domain. Verify any AR Triangle-related links using PhishDestroy’s real-time threat database. Report this domain to your security team or wallet provider if funds were exposed. Monitor blockchain transactions for unauthorized transfers and consider revoking suspicious wallet connections via tools like revoke.cash.