# 0851wns888.com — MALICIOUS

> Explore 0851wns888.com's ongoing phishing activity and related threat indicators. Stay informed with PhishDestroy's detailed domain investigation.

## Summary
PhishDestroy identifies 0851wns888.com as an active domain engaged in generic phishing schemes. Registered on June 23, 2021, and classified with a high-risk rating, this domain is linked to efforts targeting unsuspecting internet users through deceptive tactics designed to steal sensitive data.

Technical examination reveals that 0851wns888.com resolves to IP address 20.255.200.238 and is registered via Dynadot Inc. VirusTotal flags this domain by 12 out of 95 security vendors, reinforcing its malicious classification. The domain's infrastructure and registration details fit known phishing patterns, contributing to its high-threat assessment.

Currently, the domain remains active and poses a significant phishing risk. PhishDestroy recommends continuous monitoring and blocking measures to mitigate potential harm. Users and organizations are advised to treat communications involving 0851wns888.com with caution and maintain updated security defenses to prevent compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: 验证

## Domain Intelligence
- Registered: 2026-03-04 13:07:01
- Registrar: Dynadot Inc
- IP: 20.255.200.238
- Nameservers: logan.ns.cloudflare.com princess.ns.cloudflare.com

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "Criminal IP", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "SOCRadar", "Sophos", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
验证 提交 进入网站 在线客服 提醒 Close

### External Scripts
- https://code.jquery.com/ui/1.13.2/jquery-ui.js
- https://use.fontawesome.com/releases/v5.0.10/js/all.js

## Evidence
- Screenshot: https://i.ibb.co/HDSBH3sP/65a95e189261.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/83ed15ec-d858-414b-8c6d-7ab6c5ffb8d4
- PhishDestroy: https://phishdestroy.io/domain/0851wns888.com/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/0851wns888.com/
Last updated: 2026-03-14