mass.report
Scan Intelligence Report0/100
low Risk
luihh.com
https://luihh.com
IP
37.1.195.36 · IROKO Networks Corporation
Location
Frankfurt am Main, Germany
Domain Age
37 days
HTTP
404 · 83.6s
SSL
Valid· E7, Let's Encrypt, US
Status
COMPLETED
Domain Intelligence: luihh.com
Scanned 2 times since Jun 24, 2026, 06:35 AM UTC
ℹ Low (10)
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
Unknown
Vendors
27/31
Status
partial
✓ polyswarm✗ threatyeti✓ avg✓ sophos✓ microsoft✗ norton✓ yandex✗ brightcloud✓ spamhaus✓ urlquery✓ openphish✓ phishreport✓ cisa✓ urlscan✓ apple✓ apwg✓ netcraft✓ isitphish✓ phishtank✓ virustotal✓ eset✗ chainpatrol✓ urlabuse✓ bitdefender✓ avast✓ emsisoft✓ drweb✓ mcafee✓ kaspersky✓ fortiguard✓ google
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
Unknown
UnknownTechnology · 7/19/2026
Summary
The scan shows a 404 Not Found page for luihh.com with minimal content and a single IP fetch to api.ipify.org. The page does not display any login forms or credential collection elements. WHOIS indicates a recently registered domain (37 days) with a Let's Encrypt certificate. Visuals from the attached screenshot are not provided here, but the HTML confirms a generic nginx 404 page with no branding or impersonation evidence in the source. Based on the evidence, there is no clear phishing or impersonation signal from the domain itself at this time.
Evidence Summary
▸Observed 2 capture stage(s); canonical stage is settled_render.
Capture
Stages: 2
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 1
Hosts: 1
Domains: 1
Attack Techniques (0)
Indicators of Compromise (0)
No specific IOCs identified in source
Risk AssessmentUsed in abuse reports
The domain luihh.com is newly registered (37 days) with a basic 404 page and no credential collection or obvious impersonation elements in the static HTML. The screenshot may show branding that is not reflected in the HTML, but the current page content does not indicate phishing or abuse. Because the page is not presenting login UI or brand impersonation signals in the accessible source, the risk of phishing is low based on available data; monitor for any future changes or new subpages that might attempt impersonation or data exfiltration.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API