acc-amex[.]ueno-won[.]com

Analysis indicates that the domain acc-amex.ueno-won.com was registered on 17 December 2025 through Aceville Pte. Ltd. The domain resolves to the IPv4 address 23.160.193.23, which is advertised as belonging to NetInformatik Inc. in the United States under ASN 397270. No TLS certificate is present, and the service is currently offline. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal reports that 22 of 93 scanning engines flag the domain as malicious, confirming a consensus of detection across multiple vendors.

Reputation services assign extremely low scores: Scamadviser rates the site 1 out of 100, while Gridinsoft assigns a score of 0 out of 100. The nameserver configuration uses three dnspod.com entries (a.dnspod.com, b.dnspod.com, c.dnspod.com). The overall risk rating is elevated. The evidence points to a generic phishing campaign, but the specific phishing kit or target page content has not been disclosed.

Because the site is offline, real‑time verification of payloads is not possible; however, the combination of low reputation scores, multiple vendor detections, and blocklist presence suggests a high likelihood of malicious intent. Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP for any future activation, and add the host to internal threat intelligence feeds. Ongoing observation of the registrar Aceville Pte. Ltd. may reveal additional domains employing the same infrastructure. Until the domain becomes active again, further forensic analysis of the web content remains pending.