ux05web[.]us
Verificação de phishing e segurança de ux05web.us
“Namecheap Parking Page”
ux05web.us — Conteúdo indisponível (HTTP 502). Representação da marca: ["namecheap"]. Resumo das evidências: VirusTotal 2/93 (PhishFort, SOCRadar); URLQuery 9 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: NameSilo.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain ux05web.us was registered through NameSilo, LLC on February 25, 2026 and is currently listed as offline. DNS resolution points to the IPv4 address 68.65.123.59, which is announced by AS22612 owned by Namecheap, Inc. and geolocated to the United States. The authoritative nameservers are dns1.namecheaphosting.com and dns2.namecheaphosting.com, indicating that the domain is hosted on Namecheap’s parking infrastructure. The HTTP response presents the page title "Namecheap Parking Page" and no SSL certificate is presented, confirming that the site is served over plain HTTP without transport encryption.
Threat intelligence indicates that the domain is flagged by three security blocklists and has been actively blocked by the PhishDestroy, MetaMask, and SEAL detection engines. VirusTotal analysis shows that two of ninety‑three security vendors have raised alerts on the domain, reinforcing the presence of malicious indicators. The classification assigned to this domain is "generic phishing", but the content of the landing page has not been captured, so the exact phishing vector or targeted brand remains unknown.
Defenders should continue to monitor the domain for any re‑activation, enforce blocklist rules that already include ux05web.us, and consider adding the domain to local deny lists to prevent future connections. Network sensors should flag any outbound connections to 68.65.123.59 originating from internal assets, and TLS inspection policies should be applied to any future HTTPS attempts should the domain acquire a certificate. Given the absence of an SSL certificate and the parking page title, the current threat surface appears limited to the domain’s potential reuse for phishing campaigns, and remediation should focus on containment until the domain is definitively retired.
Inteligência de segurança de rede Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | s.cdn-fileserver.com |
malicious | Sinkholed |
| DigiCert UltraDNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com |
malicious | Sinkholed |
| DNS4EU | ux05web.us |
malicious | Sinkholed |
| DNS4EU | resultsfindernow.com |
malicious | Sinkholed |
| OpenDNS | resultsfindernow.com |
phishing | Phishing Block |
| Cloudflare DNS | resultsfindernow.com |
malicious | Sinkholed |
| Quad9 DNS | resultsfindernow.com |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências e relatórios externos
PD-20260225-7793C5 Recipient: abuse@namesilo.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo