uninstalltooll[.]ru

PhishDestroy first observed uninstalltooll.ru on Aug 25, 2026. The captured page title is “Uninstall Tool — удаление программ и остатков в Windows”. Current evidence score: 68/100 (high).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 6 detections among 91 engines: alphaMountain.ai, ESTsecurity, Fortinet, Gridinsoft, SOCRadar, Viettel Threat Intelligence on Aug 25, 2026 at 23:32 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 10 community pulse references (not vendor detections) on Aug 25, 2026 at 23:33 UTC. The separate external-blocklist snapshot contained no matches on Aug 25, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Aug 25, 2026 at 23:32 UTC. URLScan completed without a malicious verdict (score 0) on Aug 25, 2026 at 23:08 UTC.

The collector marked the hostname reachable on Aug 25, 2026 at 20:58 UTC, but did not retain the HTTP response code. Registration records for the domain list REGRU-RU as the registrar and Aug 16, 2026 as the creation date. Registration preceded first observation by 9 days. At collection time, the hostname resolved to 185.26.122.8 on AS62082 (Hostland LTD). The recorded endpoint location is St Petersburg, RU. The stored server header is nginx. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 16, 2026; checked Aug 25, 2026 at 22:02 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.