# hong888.cyou — MALICIOUS > hong888.cyou is flagged for phishing and taken offline after detection. Learn about its threat profile and security implications. ## Summary PhishDestroy identifies hong888.cyou as a high-risk phishing domain designed to deceive users and harvest sensitive data. The domain, created on February 21, 2026, is categorically classified under generic phishing threats. Technical analysis reveals hong888.cyou was registered through Dynadot Inc and appears on 1 security blocklist. It was flagged by 14 out of 95 VirusTotal security vendors and mentioned in 2 AlienVault OTX threat pulses, indicating active monitoring by cybersecurity communities. Currently, the domain is offline, mitigating immediate threats. However, its previous presence on security blocklists highlights the importance of ongoing vigilance. PhishDestroy recommends maintaining updated threat intelligence to prevent similar phishing attacks. ## Threat Details - Verdict: MALICIOUS - Site status: alive (HTTP 530) - Page title: TK-SHOP ## Domain Intelligence - Registered: 2026-02-21 07:01:08 - Registrar: Dynadot LLC - Country: US - IP: 112.213.120.12 - SSL Issuer: R13 ## Detection Status - VirusTotal: 14 vendors flagged Vendors: ["ADMINUSLabs", "alphaMountain.ai", "Cluster25", "CRDF", "CyRadar", "Ermes", "Forcepoint ThreatSeeker", "Fortinet", "Google Safebrowsing", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos"] - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["PhishDestroy"] ## Evidence - Screenshot: https://urlscan.io/screenshots/019bbf36-f6ad-7232-84cd-ad22e42338f6.png - PhishDestroy: https://phishdestroy.io/domain/hong888.cyou/ - LLM endpoint: https://phishdestroy.io/domain/hong888.cyou/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/hong888.cyou/ Last updated: 2026-03-19