0a0zo7[.]uesbnb[.]cc

The domain 0a0zo7.uesbnb.cc was registered on 11 March 2026 through Dominet (HK) Limited and resolves to the IP address 188.114.97.3, which belongs to AS13335 operated by Cloudflare, Inc. The hosting infrastructure is located in the United States. DNS resolution uses the Cloudflare authoritative name servers courtney.ns.cloudflare.com and james.ns.cloudflare.com. The site presented a TLS certificate issued by Let’s Encrypt (certificate identifier E8) and returned an HTTP response indicating the site is currently taken offline. Open‑source intelligence shows the page title returned by the server is “UBNB”, and the domain is classified as a crypto‑scam that impersonates the Facebook brand.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. Automated reputation services assign a Gridinsoft trust score of 0 out of 100, confirming a high‑confidence malicious rating. VirusTotal analysis reports that six of ninety‑four scanning engines flagged the domain as malicious, reinforcing the suspicion of malicious intent.

The evidence base does not include a public Safe Browsing or OTX entry, and no additional payload or command‑and‑control indicators have been observed. Defenders should add 0a0zo7.uesbnb.cc to blocklists at the network perimeter, monitor DNS queries for the associated IP and name‑server pair, and consider the domain a confirmed crypto‑scam targeting Facebook users. Ongoing observation of the hosting provider and any future re‑activation should be performed, and any user reports of similar “UBNB” pages should be escalated for further forensic analysis.