# onesim.tech — SUSPICIOUS

> onesim.tech is a live SIM-swap phishing page detected on May 9, 2025, hosted at 172.67.73.234. Check the full report.

## Summary
PhishDestroy identifies onesim.tech as an active SIM-swap phishing domain designed to trick visitors into surrendering their phone numbers to criminals. The page mimics legitimate mobile carrier login portals, tricking users into entering credentials that attackers can abuse for account takeovers via SIM-swapping. Security products have not yet flagged the site, with VirusTotal currently showing 0 detections out of 95 engines.  This domain was registered on May 09, 2025 through Unstoppable Domains Inc., a platform known for decentralized naming services. It resolves to IP address 172.67.73.234 and uses a Google Trust Services SSL certificate to appear legitimate. These technical details suggest a hastily deployed campaign leveraging reputable infrastructure to evade early detection.  If you visited onesim.tech, avoid entering any personal information or credentials. Disconnect from the site immediately and monitor your accounts for unauthorized activity. Consider resetting passwords from a known-safe device and enable multi-factor authentication using app-based or hardware tokens instead of SMS. Report the domain to your organization’s security team or forward indicators to your threat intelligence platform for blocking.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-05-09 05:00:04
- Registrar: Unstoppable Domains Inc.
- IP: 172.67.73.234

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/59f1f3d1-236a-489a-b9bb-836336a48766
- PhishDestroy: https://phishdestroy.io/domain/onesim.tech/
- LLM endpoint: https://phishdestroy.io/domain/onesim.tech/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/onesim.tech/
Last updated: 2026-03-28