us06webs[.]us

us06webs.us entered the PhishDestroy evidence set on Jan 29, 2026. Stored content metadata identifies Across as the apparent target. Content analysis also recorded brand signals for Apple, Celer, Google, Outlook, Ups, and Zoom. The stored content classification is brand impersonation. The assembled evidence scores 67/100 (elevated).

One independent source is positive: VirusTotal. VirusTotal recorded 4 detections among 93 engines: alphaMountain.ai, Forcepoint ThreatSeeker, PhishFort, SOCRadar on Feb 25, 2026 at 00:04 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Mar 25, 2026 at 12:13 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:27 UTC; content was unavailable. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar. At collection time, the hostname resolved to 2407:30c0:183::aa72:4e50 on AS209242 (CLOUDFLARESPECTRUM Cloudflare London, LLC, US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “One platform to connect | Zoom”. DOM analysis completed on Apr 23, 2026 at 03:21 UTC; stored DOM score 25/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:14 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.