# tenval.icu — SUSPICIOUS

> tenval.icu is a newly registered domain flagged as credential-phishing by 0/95 VirusTotal scanners. Avoid entering sensitive data—block and report immediately.

## Summary
PhishDestroy identifies tenval.icu as an active credential-phishing domain currently under investigation.

This domain was flagged by 0 of 95 VirusTotal vendors, registered through Global Domain Group LLC, resolving to IP 94.183.188.179 after creation on March 18, 2026. Trust scores are unavailable due to its recent emergence.

Current status remains under_investigation; however, the absence of VirusTotal detections does not guarantee safety. Users should block tenval.icu at the network and endpoint levels, avoid interactions, and submit samples to threat-intel platforms. Enterprises should update firewall rules and SIEM queries to flag connections to 94.183.188.179. Monitor for future takedowns and adjust risk scoring accordingly.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 16:04:11
- Registrar: Global Domain Group LLC
- IP: 94.183.188.179

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f5aa2ba2-ebe4-4fbc-b93c-d5c87184d1a1
- PhishDestroy: https://phishdestroy.io/domain/tenval.icu/
- LLM endpoint: https://phishdestroy.io/domain/tenval.icu/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tenval.icu/
Last updated: 2026-03-21