malwarebytes-bytes[.]us

The domain malwarebytes-bytes.us was registered on February 21, 2026 through ENOM, INC. and is hosted on an IP address owned by Hostwinds LLC (AS54290) located in the United States (23.254.217.66). DNS resolution points to Hostwinds name servers ns57.hostwindsdns.com and ns58.hostwindsdns.com. No TLS certificate was observed, indicating the site was served over plain HTTP. The page title retrieved from the site reads "Malwarebytes Download - Malwarebytes Antivirus Download," yet threat intelligence flags the domain as a Facebook impersonation used in a tech support scam.

The site has been listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigned a trust score of 0 out of 100, reflecting a lack of credibility. VirusTotal analysis shows four of ninety-three antivirus engines flagged the domain, providing independent confirmation of malicious intent. The infrastructure appears to have been taken offline as of the report date, July 23, 2026.

While the exact phishing page content has not been released, the combination of brand impersonation, malicious page title, and low trust score strongly suggests a credential‑harvesting or malware‑delivery operation targeting Facebook users under the guise of technical support. Defenders should continue to block the domain and its associated IP, monitor for any re‑hosting attempts, and update URL filtering rules to include the observed host names. Additional investigation of the three blocklists may reveal related indicators of compromise. Until the domain reappears, the current mitigation stance remains appropriate.