ip97iv5t630sgnz047ijwapdlnd068ptehjenddup5hq4rg4y4e2qj6unfr3[.]s3-website-us-east-1[.]amazonaws[.]com

The domain ip97iv5t630sgnz047ijwapdlnd068ptehjenddup5hq4rg4y4e2qj6unfr3.s3-website-us-east-1.amazonaws.com has been identified as a generic phishing threat. This domain does not impersonate a specific brand and does not appear to be associated with a known crypto drainer kit, but its structure suggests it may be used for credential theft or other malicious data collection. It was registered through MarkMonitor Inc., a legitimate registrar, which adds a layer of difficulty in attribution. The domain resolves to IP address 54.231.134.237, which is part of Amazon Web Services infrastructure, indicating the site was hosted on an S3 bucket.

Technical indicators paint a clear picture of the risk. VirusTotal reports 2 out of 95 security vendors flagging this domain as malicious, a relatively low but notable detection rate. The domain was created on May 06, 2026, making it very recent at the time of analysis. It appears on one security blocklist, and Google Safe Browsing status is not listed (likely not flagged by GSB). The domain currently has no SSL certificate, which is typical for phishing sites that do not prioritize secure connections.

As of now, the domain is offline and has been taken down. PhishDestroy recommends that users who may have interacted with this site change any credentials entered and monitor accounts for suspicious activity. While the immediate threat is neutralized, the domain's recent creation and low blocklist presence suggest similar domains may appear in the future. Always verify URLs before entering sensitive information.