# woihux.com — SUSPICIOUS > PhishDestroy identifies woihux.com as a live fake login scam harvesting credentials. VirusTotal shows 0/95 detections. Stop now and verify any visit. ## Summary PhishDestroy has flagged woihux.com as an active fake-login phishing site designed to steal user credentials under the guise of a legitimate service. The domain presents a convincing but counterfeit login page that mirrors a popular brand or platform, tricking visitors into entering usernames and passwords. Once captured, these credentials are harvested by threat actors for account takeovers, financial fraud, or further phishing campaigns. The site’s immediate goal is silent exfiltration of sensitive login data. This domain was registered on March 14, 2026, through GMO Internet, Inc., and currently resolves to 104.21.81.108. VirusTotal analysis shows zero detections across 95 security engines, indicating it remains under the radar of most antivirus and threat intelligence platforms. Its SSL certificate, issued by Let’s Encrypt, adds a false veneer of legitimacy, potentially lulling users into a misplaced sense of security. The low detection rate highlights the stealth and novelty of this campaign, making it especially dangerous for early victims. If you accessed woihux.com or entered any credentials, immediately change passwords on all related accounts and enable multi-factor authentication. Scan your device for malware using reputable security software and monitor accounts for unauthorized activity. Report the domain to PhishDestroy for takedown and share any captured screenshots or URLs. Stay vigilant—new phishing domains emerge daily, and even recently created sites can become active threats within hours. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-14 20:15:31 - Registrar: GMO Internet, Inc. - IP: 104.21.81.108 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/woihux.com - PhishDestroy: https://phishdestroy.io/domain/woihux.com/ - LLM endpoint: https://phishdestroy.io/domain/woihux.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/woihux.com/ Last updated: 2026-04-07