# web.adfn02u.top — SUSPICIOUS

> PhishDestroy identifies web.adfn02u.top as a fake login scam hosting phishing pages. VirusTotal flags it with only 1/95 detections. Avoid entering credentials.

## Summary
PhishDestroy identifies web.adfn02u.top as a live fake login scam actively harvesting user credentials. This domain was flagged by only 1 out of 95 VirusTotal scanners at the time of assessment. The domain was created on December 02, 2025, just days ago, and is registered through Gname.com Pte. Ltd., a registrar known for rapid domain turnover that often correlates with malicious intent. It resolves to IP 172.67.143.30 and holds a legitimate Google Trust Services SSL certificate, which attackers frequently abuse to lend false credibility to their fraudulent sites.  The specific threat posed by web.adfn02u.top is a credential phishing campaign designed to trick visitors into submitting login details to counterfeit pages mimicking legitimate services. The domain’s recent creation date and extremely low detection rate (1/95 on VirusTotal) suggest it is either newly deployed or deliberately configured to evade early-stage detection. The presence of a valid SSL certificate further lowers user suspicion, making it more likely that unsuspecting individuals will enter sensitive information such as usernames, passwords, or financial data.  Users who visited this domain should immediately check their accounts for unauthorized access and change passwords if any credentials were entered. It is strongly advised to scan local devices with updated antivirus software and monitor financial statements for suspicious transactions. If the domain was accessed via email or message link, report the sender and avoid interacting with similar communications. For network administrators, consider blocking the domain at the firewall and DNS level based on the IP 172.67.143.30 and domain name web.adfn02u.top to prevent further exposure within your environment.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-02 16:07:16
- Registrar: Gname.com Pte. Ltd.
- IP: 172.67.143.30

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/556b44de-1075-4571-a65e-fef72ebacefa
- PhishDestroy: https://phishdestroy.io/domain/web.adfn02u.top/
- LLM endpoint: https://phishdestroy.io/domain/web.adfn02u.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web.adfn02u.top/
Last updated: 2026-03-23