Domain Age
4 Months
Tranco Rank
#692,354
Hosting Provider
Amazon.com, Inc.
Threat History
Issues Found
This domain impersonates the Potato Chat messaging application to conduct phishing attacks, harvest personal contact information, and trick users into downloading suspicious software.
URLert analyzed recent scan activity for tutuduanyu.org and found 2 results.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Dangerous | https://tutuduanyu.org/Pinayleak | 2w ago | |
| Dangerous | https://tutuduanyu.org/calicornerexotics | 2mo ago |
Historical and current IP address mappings for this domain.
| IP Address / Hosting | Status | Subdomains | Last Seen |
|---|---|---|---|
Hosted by: Amazon.com, Inc. (AS16509) | Historical | tutuduanyu.org | 22 hours ago |
Hosted by: Amazon.com, Inc. (AS16509) | Historical | tutuduanyu.org | 22 hours ago |
Hosted by: Amazon.com, Inc. (AS16509) | Historical | tutuduanyu.org | 22 hours ago |
Hosted by: Amazon.com, Inc. (AS16509) | Historical | tutuduanyu.org | 22 hours ago |
Received a suspicious link? Paste the full link to investigate.
Access this classification data programmatically via our API.
{
"domain": "tutuduanyu.org",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Phishing and Credential Harvesting"
},
"identity": {
"headline": "Deceptive site impersonating Potato Chat for phishing and malware distribution",
"summary": "This domain impersonates the Potato Chat messaging application to conduct phishing attacks, harvest personal contact information, and trick users into downloading suspicious software.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"scam",
"credential harvesting",
"malware",
"impersonation"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-02-13T03:51:12.442000Z",
"rank": 692354,
"hosting_provider": "Amazon.com, Inc."
}
}