ls26biz[.]com

The domain ls26biz.com was registered on June 06, 2025 through NiceNIC International Group Co., Limited and is currently listed as offline. DNS resolution points to the IP address 91.206.71.186, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the Netherlands. The authoritative nameservers are david.ns.cloudflare.com and dina.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. No SSL certificate was observed for the host, meaning HTTPS connections would be unencrypted or forced to fallback to HTTP.

The sole page title retrieved from the site reads "Вы не робот?", a Russian phrase translating to "You are not a robot?", suggesting a possible captcha‑style challenge page, though the actual content has not been examined. VirusTotal analysis shows that three out of ninety‑five security vendors flagged the domain, implying a modest level of detection across scanning engines. The domain is blocked by the PhishDestroy service and appears on a single security blocklist, reinforcing the view that it has been identified as malicious by at least one external mitigation platform.

Gridinsoft assigned a trust score of zero out of one hundred, indicating a high confidence rating for malicious behavior. While the classification is recorded as generic phishing, the limited public evidence does not disclose a specific target brand or credential‑harvesting technique. Defenders should continue to block DNS resolution to 91.206.71.186, monitor for any resurgence of the domain, and incorporate the observed indicators—registration date, registrar, nameserver set, IP address, lack of TLS, and the "Вы не робот?" title—into threat‑intel feeds to improve detection of similar infrastructure in future campaigns.