0wsu2fhnkv[.]46464tk[.]com

The domain 0wsu2fhnkv.46464tk.com was registered on November 07, 2025 through Gname.com Pte. Ltd. Its current status is active, and it is classified under the generic_phishing threat type with a high risk rating. The sole page title observed is “load…”, and no additional content has been publicly disclosed. Infrastructure analysis shows the domain resolves to the IPv4 address 118.193.68.138, which belongs to AS135377 operated by UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED. The IP is geolocated in the Republic of Korea. Authoritative name servers are a5.share-dns.com and b5.share-dns.net, both typical of shared DNS services. The site serves traffic over HTTPS using a Let’s Encrypt R12 certificate. Reputation data indicate a very low trust score, with Scamadviser reporting 1/100 and Gridinsoft 0/100. The domain appears on two independent phishing blocklists, specifically PhishDestroy and PhishingDB. VirusTotal analysis records 14 out of 95 security vendors flagging the domain as malicious, reinforcing the high‑risk assessment. Defenders should treat this indicator as hostile. Immediate actions include adding the domain and its resolving IP to outbound and inbound blocklists, enforcing TLS inspection to capture any payload, and monitoring DNS queries for the associated name servers. Because the actual page content remains limited to the generic title, further investigation of the payload delivered after the initial request is recommended to confirm the phishing vector and to identify any credential‑harvesting forms or redirects.