greenwxkjxpbujclupbukunm74sjyxa2237myxvchjwxdvsubnhlglid[.]com

The domain greenwxkjxpbujclupbukunm74sjyxa2237myxvchjwxdvsubnhlglid.com is classified as an elevated risk generic phishing threat. The current status of the domain is offline, indicating an immediate mitigation response may have been implemented. Threat actors often leverage such domains to execute phishing campaigns that aim to capture sensitive information from targets.

Analysis indicates that the domain was created on February 21, 2026. It has been flagged by 4 out of 95 security vendors on VirusTotal, suggesting a relatively lower detection rate within the current dataset of malware signatures. The domain is also listed on one security blocklist and has been specifically blocked by PhishDestroy. Registration details reveal that it was registered through NiceNIC International Group Co., Limited. The domain currently resolves to the IP address 172.67.164.76, which may need further investigation. Additionally, the Gridinsoft trust score for this domain is 0 out of 100, indicating a high likelihood of malicious intent associated with its usage.

To mitigate the threat posed by this domain, organizations should employ domain filtering and block access to known phishing domains as identified by reputable blocklists. Monitoring environments for potential reused IP addresses in future phishing attempts is recommended, particularly given its current resolution to 172.67.164.76. User awareness training should be emphasized to educate potential targets regarding recognizing phishing attempts and utilizing link hovering to differentiate legitimate correspondence from fraudulent attempts. Regular updates of security infrastructure to include detection against varied phishing tactics are vital for enhancing the overall security posture.