wwwbbin[.]app

PhishDestroy first observed wwwbbin.app on May 30, 2026. The captured page title is “世界杯指定网站（中国区）有限公司”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 100/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, DNS security resolvers, Cloudflare Radar, and URLQuery. VirusTotal recorded 18 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, LevelBlue, Lionic, SOCRadar, Sophos, VIPRE, Webroot on Aug 6, 2026 at 02:20 UTC. DNS security checks returned 5 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 4 detections; no observation timestamp was retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on May 30, 2026 at 13:14 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 02:36 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:30 UTC. Registration records for the domain list Key-Systems LLC as the registrar and Dec 5, 2025 as the creation date. At collection time, the hostname resolved to 45.144.136.33 (AS139659 LUCIDACLOUD LIMITED). The recorded endpoint location is Tsuen Wan, HK. The stored server header is nginx. DOM analysis on May 30, 2026 at 19:20 UTC returned 88/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 15, 2026; checked May 30, 2026 at 20:00 UTC.

The content indicators and 4 positive source findings support the current brand impersonation classification.