bk[.]zubdev[.]xyz

bk.zubdev.xyz was registered on 21 February 2026 and is currently taken offline. DNS resolution points to IP address 5.189.161.88, which belongs to AS51167 operated by Contabo GmbH in France. The hosting provider is listed on a single security blocklist and the domain is actively blocked by the PhishDestroy feed. Automated scanning on VirusTotal returned three positive detections out of ninety‑three antivirus engines, indicating that at least a subset of security products recognize malicious behavior associated with the domain.

The Gridinsoft trust score of zero further corroborates a low reputation. The site presented the HTML title “Welcome to Uno Solutions”; no additional content has been captured, and the page has not been examined for credential‑stealing forms or brand impersonation. An SSL certificate with an R10 rating was observed, suggesting a low‑grade or self‑signed certificate, which is typical for infrastructure used in phishing campaigns. The limited intelligence does not reveal the exact phishing kit or targeted brand, nor does it provide evidence of active command‑and‑control traffic.

Given the domain’s recent creation, its association with a known hosting provider, the presence on a blocklist, multiple vendor detections, and a null trust score, defensive teams should treat bk.zubdev.xyz as a high‑confidence phishing indicator. Recommendations include adding the domain and its IP address to deny lists, monitoring for any resurgence of activity, and ensuring that email filters block URLs that resolve to the same host. Continuous re‑evaluation is advised in case the infrastructure is re‑used by related campaigns.