app[.]uxento[.]io

app.uxento.io is a subdomain of uxento.io. PhishDestroy first observed the hostname on Feb 26, 2026. The captured page title is “uxento”. Current evidence score: 86/100 (critical).

One source contains a positive finding: VirusTotal. VirusTotal recorded 1 detections among 91 engines: Gridinsoft on Jul 27, 2026 at 02:25 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 8/100 (Suspicious); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Mar 2, 2026 at 21:04 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:50 UTC.

Cloaking was recorded with HTTP 307 on Aug 7, 2026 at 22:00 UTC. The cloaking probe recorded status split conditional delivery at 1/100 on Aug 7, 2026 at 22:00 UTC: redirect: raw=redirect_307; http=307; via=https_proxy; location=/login; server=Vercel. Registration records for the registrable domain uxento.io list Porkbun LLC as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 216.150.1.129 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Vercel edge infrastructure; the origin server is not established by this address. DOM analysis on Jul 9, 2026 at 02:22 UTC returned 86/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction on Jul 29, 2026 at 02:29 UTC retained 0 format-validated wallet addresses and 1 Telegram indicator. TLS metadata lists Let's Encrypt / R12 as the certificate issuer with validity through Jun 1, 2026; checked Mar 15, 2026 at 08:08 UTC.

Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.