# PhishDestroy domain threat record: uso6webmeet.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/uso6webmeet.com/ Machine-readable companion: https://phishdestroy.io/domain/uso6webmeet.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-10-21 08:30:08 UTC - Last availability or vendor check: 2026-10-21 22:32:53 UTC - Stored record updated: 2026-10-22 14:24:53 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: namecheap ## Stored infrastructure - Observed IP address: 192.64.119.137 - Registrar in stored WHOIS data: NameCheap, Inc. - Last stored HTTP status: 302 - Registration date (registry RDAP, uso6webmeet.com): 2026-10-19 12:14:48 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15d5f-094d-7433-9d7d-01cb8ee9109b/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/uso6webmeet.com - Certificate Transparency search: https://crt.sh/?q=%25.uso6webmeet.com - Web Archive lookup: https://web.archive.org/web/*/https://uso6webmeet.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added uso6webmeet.com to its internal blocklist on 2026-10-21 after an admin report noted the domain was only two days old. The page fetched on that date returned HTTP 200 and displayed text promoting Namecheap domain auctions. No malicious payloads or credential‑phishing forms were observed. The domain is therefore classified as suspicious pending further evidence. How the scam works A newly‑registered domain that mimics legitimate services can be used to lure users into providing personal data, credentials, or payments, but the current page only offers a generic auction promotion. Without additional malicious elements, the listing does not demonstrate a specific fraud mechanism; it merely reflects the broader risk that such domains may be repurposed for phishing or scams. Evidence VirusTotal scanned the domain on 2026-10-21 with 92 engines and reported 0 malicious or suspicious detections, tagging it as a possible DGA. Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured the page on 2026-10-21; its machine‑learning engine gave a malicious score of 96, but the overall verdict was clean. OTX listed two pulses referencing the domain as of 2026-10-21. PhishDestroy’s internal blocklist marks the domain as suspicious, while external blocklists returned no matches. Infrastructure The domain was registered with NameCheap, Inc. on 2026-10-19. DNS resolution points to IP 192.64.119.137, which belongs to Namecheap’s network in the United States. No additional hosting or CDN details are available. What to do Treat the site as suspicious and avoid entering any credentials, personal information, or payment details. Users who may have submitted data should change affected passwords and monitor accounts for unusual activity. Defenders should block the exact domain in web filters and review any access logs for connections to 192.64.119.137. Continue monitoring for any future changes in behavior or reputation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15d5f-094d-7433-9d7d-01cb8ee9109b/ VirusTotal report: https://www.virustotal.com/gui/domain/uso6webmeet.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=uso6webmeet.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 09:04:31 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15d5f-094d-7433-9d7d-01cb8ee9109b.png Captured: 2026-10-21 08:30:08 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15d5f-094d-7433-9d7d-01cb8ee9109b.png Captured: 2026-10-22 03:30:12 UTC Source report: https://urlscan.io/result/01a15d5f-094d-7433-9d7d-01cb8ee9109b/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ac795560-75e7-40a7-abb4-99507316a4f2.png Captured: 2026-10-21 08:31:49 UTC Source report: https://radar.cloudflare.com/scan/ac795560-75e7-40a7-abb4-99507316a4f2 SHA-256: 005a77c555d9815f106dc6366390f60dd80efccff8eca76ce9248d0ccfa8459a - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15d95-4132-7049-b61f-8bc4d616967a.png Captured: 2026-10-21 08:30:35 UTC Source report: https://urlscan.io/result/01a15d95-4132-7049-b61f-8bc4d616967a/ SHA-256: e7134a23b877fcbf7d8ae36e0f3421cc329c854a40a83733212ab812f10adaa6 - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15d9a-8f3e-760f-9a81-0f900e826bf3.png Captured: 2026-10-21 08:36:28 UTC Source report: https://urlscan.io/result/01a15d9a-8f3e-760f-9a81-0f900e826bf3/ SHA-256: e7134a23b877fcbf7d8ae36e0f3421cc329c854a40a83733212ab812f10adaa6 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T08:34:46Z", "uuid": "01a15d5f-094d-7433-9d7d-01cb8ee9109b", "scanned_at": "2026-10-21T07:31:27Z", "final_url": "http://www.uso6webmeet.com/", "status": 200, "redirected": "parent-domain", "redirects": [ { "to": "https://uso6webmeet.com/", "from": "http://uso6webmeet.com/", "status": 307 }, { "to": "http://uso6webmeet.com/", "from": "https://uso6webmeet.com/", "status": 307 }, { "to": "http://www.uso6webmeet.com/", "from": "http://uso6webmeet.com/", "status": 302 }, { "to": "https://www.uso6webmeet.com/", "from": "http://www.uso6webmeet.com/", "status": 307 }, { "to": "http://www.uso6webmeet.com/", "from": "https://www.uso6webmeet.com/", "status": 307 } ], "ip": "104.219.250.36", "ptr": "nc-ph-3812.web-hosting.com", "domains": [ "aftermarketapi.namecheap.com", "lander.parity.domains", "uso6webmeet.com" ], "ips": [ "104.19.251.10", "34.123.115.113", "104.219.250.36", "192.64.119.137" ], "asns": [ "13335", "396982", "22612" ], "countries": [ "US" ], "link_domains": [ "www.namecheap.com", "apps.apple.com", "play.google.com" ], "doc_hash": "9dc2900bcff3911cb126966f933197811756c5bb42be63155aeaf0b786ae7123", "script_hashes": [ "15bf260ba5772b2216afd83563f7f7fe4eb277c56520e0585ba62858e29b0fb1" ], "globals": [ "plausible" ], "cookies": [ "__cf_bm" ], "domain_age_days": 0, "apex_age_days": 0, "requests": 12, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 96, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "nginx/1.28.3 (Ubuntu)", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T08:51:43Z", "uuid": "ac795560-75e7-40a7-abb4-99507316a4f2", "scanned_at": "2026-10-21T08:31:49Z", "final_url": "https://uso6webmeet.com/", "history": [ { "url": "https://uso6webmeet.com/", "status": 0 } ], "dom_hash": "222edc6576ce4f900a55dd02c5523f77c5fa64ee8b4e540f3ff8452026c169a8", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "uso6webmeet.com", "type": "A", "value": "192.64.119.137" } ], "dnssec_valid": false, "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-19T12:14:48Z", "updated": "2026-10-19T12:14:52Z", "expires": "2027-10-19T12:14:48Z", "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T09:01:50Z", "analysis_at": "2026-10-21T08:29:57Z", "stats": { "timeout": 0, "harmless": 0, "malicious": 0, "suspicious": 0, "undetected": 92 }, "reputation": 0, "tags": [ "dga" ], "registrar": "NameCheap, Inc.", "created": "2026-10-19T12:14:48Z", "expires": "2027-10-19T12:14:48Z", "updated": "2026-10-19T12:14:52Z", "first_seen": "2026-10-21T08:30:40Z", "dns": [ { "ttl": 1800, "type": "NS", "value": "dns2.registrar-servers.com" }, { "ttl": 1800, "type": "A", "value": "192.64.119.137" }, { "ttl": 1800, "type": "MX", "value": "mx2.privateemail.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "mx1.privateemail.com", "priority": 10 }, { "ttl": 3601, "type": "SOA", "rname": "hostmaster.registrar-servers.com", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "TXT", "value": "v=spf1 include:spf.privateemail.com ~all" }, { "ttl": 1800, "type": "NS", "value": "dns1.registrar-servers.com" } ], "dns_at": "2026-10-21T08:30:40Z", "whois": { "registrar": "NameCheap, Inc.", "registrar_iana_id": "1068", "registrar_url": "http://www.namecheap.com", "created": "2026-10-19T12:14:48Z", "updated": "2026-10-19T12:14:52Z", "expires": "2027-10-19T12:14:48Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "registration": "2026-10-19T12:14:48Z", "registrar expiration": "2027-10-19T12:14:48Z", "last update of RDAP database": "2026-10-21T08:30:40Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T08:35:32Z", "mail_config": { "mx": [ "mx2.privateemail.com", "mx1.privateemail.com" ], "spf": "v=spf1 include:spf.privateemail.com ~all", "spf_lookups": 4 }, "caa_records": { "domain": "uso6webmeet.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "ports": { "open": [ 80 ] }, "dns_server": { "ns": [ { "ip": "156.154.132.200", "host": "dns1.registrar-servers.com" }, { "ip": "156.154.133.200", "host": "dns2.registrar-servers.com" } ], "zone": "uso6webmeet.com" }, "location": { "ip": "192.64.119.137", "asn": "22612", "org": "Namecheap", "city": "Dallas", "country": "US" }, "dns": { "A": [ "192.64.119.137" ], "MX": [ "{\"exchange\": \"mx1.privateemail.com\", \"priority\": 10}", "{\"exchange\": \"mx2.privateemail.com\", \"priority\": 10}" ], "NS": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ], "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1792412098, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}", "TXT": [ "v=spf1 include:spf.privateemail.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "192.64.119.137", "family": 4 }, "whois": { "registrar": "NameCheap, Inc.", "created": "2026-10-19T12:14:48Z", "updated": "2026-10-19T12:14:52Z", "expires": "2027-10-19T12:14:48Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } } } ```