wwwmarketwebb[.]me

The domain wwwmarketwebb.me was registered on March 22, 2026 through DYNADOT LLC and is served by the authoritative nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. DNS resolution points to the IPv4 address 54.215.31.113, which belongs to an Amazon Web Services EC2 instance in the us-west-1 region of the United States. The site presented a valid Let's Encrypt R12 TLS certificate and advertised the use of HSTS, Envoy, Amazon ELB, Google Tag Manager, and GeeTest components, indicating a modern web stack hosted behind a load balancer. Gridinsoft assigned the domain a trust score of 0 out of 100, reflecting an extremely low reputation.

The domain currently appears on one security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis shows that four of ninety‑four scanning engines flagged the domain, providing additional corroboration of malicious intent. The domain is presently taken offline, and no live HTTP response or page title is available for further content analysis. At present, the specific brand or service being impersonated by the site has not been identified in the collected intelligence, leaving the exact phishing lure uncertain.

Defenders should immediately add wwwmarketwebb.me to web filtering and DNS sinkhole lists, enforce block‑listing of its associated IP address 54.215.31.113, and monitor for any new DNS records that may point to alternative hosting. Continuous observation of threat‑intel feeds for updates on the underlying phishing campaign is advised, as further indicators such as payload URLs or credential‑stealing forms may emerge. In environments where outbound traffic to AWS regions is permitted, consider restricting connections to the us-west-1 ELB endpoint until the threat is fully mitigated. The combination of a zero trust score, multiple vendor detections, and active blocklist presence warrants an elevated defensive posture for this indicator.