seattle[.]org-uwe[.]cyou

Analysis indicates that the domain seattle.org-uwe.cyou resolves to the IP address 172.67.200.128. The address is part of a large content‑delivery network that is frequently leveraged for fast web delivery, but its presence in this context is consistent with abuse patterns observed in phishing campaigns. The domain was registered through Gname.com Pte. Ltd. on October 07, 2025, making it less than one year old at the time of this assessment. Infrastructure profiling shows a single hosting endpoint without additional disclosed sub‑domains or ancillary services.

The domain has been listed by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that at least one reputable threat‑intelligence source has taken active mitigation steps. VirusTotal scans report that 14 of 91 security vendors flag the domain, providing modest but noteworthy detection consensus across multiple antivirus and URL‑reputation engines. No public Safe Browsing, Open Threat Exchange, SSL certificate details, HTTP response codes, or trust‑score metrics are currently available for the domain, and no page title or evidence links have been published, leaving the content of the site unverified.

Defenders should treat the domain as a high‑confidence indicator of credential‑harvesting activity. Recommended actions include adding the domain and its resolved IP address to network‑level deny lists, enforcing URL filtering policies that block access to the domain, and monitoring DNS queries for any internal resolution attempts. Continuous re‑evaluation is advised, as further analysis of the landing page or associated payloads could reveal additional malicious capabilities or targeted brands.