provision.uhlspmwn.biz
Classification: Malicious
provision.uhlspmwn.biz is a malicious hostname. Reported by Maltiverse (other phishing), last seen 2026-10-09.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:41:32.
- Phishing — Hosts a phishing site and is intrinsically malicious.
- Stores phishing content — Phishing resources are hosted here.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| other phishing | Maltiverse | 2026-10-09 10:03:03 | 2026-10-09 10:03:03 | malicious-activity phishing | T1566 Phishing |
Tags
phishingIP addresses resolved by this hostname
- 2606:4700:3034::ac43:80be (2026-10-15 08:35:37)
- 2606:4700:3034::6815:143 (2026-10-15 08:35:37)
- 172.67.128.190 (2026-10-16 12:39:46)
- 104.21.1.67 (2026-10-16 12:39:46)
- 172.64.80.1 (2026-10-17 16:41:32)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 16:41:32)
Whois information
- Domain
- uhlspmwn.biz
- TLD
- biz
- Nameservers
- armando.ns.cloudflare.com, margaret.ns.cloudflare.com
- Registrant
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- Country
- CN — China 🇨🇳
- Domain created
- 2026-09-10 09:05:51
- Domain expires
- 2027-09-10 09:05:51
- First indexed
- 2026-10-09 10:03:03
- Last updated
- 2026-10-17 16:41:32