us81webzoom[.]us

The domain us81webzoom.us was registered through Dynadot Inc on February 21, 2026 and is currently resolving to the IP address 87.236.16.18, which belongs to Beget LLC in Russia (AS198610). The hosting environment is fronted by Cloudflare and serves content over Nginx, while the page includes client‑side libraries such as Lodash, jQuery (via CDN), FancyBox and cdnjs. An SSL certificate issued by Let’s Encrypt (R13) is present, indicating the site is reachable via HTTPS. DNS is managed by four Beget name servers (ns1.beget.com, ns2.beget.com, ns1.beget.pro, ns2.beget.pro).

HTTP requests return a 403 status, suggesting access restrictions or a deliberately hidden landing page. The page title returned by the server reads “The new site has been successfully created and is ready to work,” which provides no direct indication of the targeted brand or service. Threat intelligence classifies the activity as an account‑takeover scam, and the site is listed on at least one security blocklist. It has been blocked by PhishDestroy and receives a Gridinsoft trust score of 0 / 100, reflecting a very low reputation.

VirusTotal analysis shows that 11 of 93 scanning engines flag the domain as malicious, reinforcing the suspicion of abuse. Defenders should treat the domain as high‑risk: block DNS resolution, enforce URL filtering, and monitor outbound connections to the associated IP. Additional investigation should focus on retrieving the actual page content, identifying any credential‑harvesting forms, and correlating traffic logs for signs of credential submission. Until further evidence is gathered, the domain should be considered an active malicious infrastructure used for account‑takeover campaigns.