pixelweb[.]buzz

pixelweb.buzz was registered on 21 February 2026 through Web Commerce Communications Limited. The domain resolves to 104.21.73.196, an address owned by Cloudflare, Inc. (AS13335) and geographically attributed to the United States. Authoritative nameservers listed for the zone are louis.ns.cloudflare.com and raegan.ns.cloudflare.com. No TLS certificate is presented, indicating the site is served over plain HTTP. The landing page title recorded by automated crawlers is “The Official Trump Meme | GetTrumpMemes”, which does not reference the targeted brand.

Nevertheless, the intelligence feed classifies the campaign as an Apple‑related wallet/seed phishing operation, suggesting that the underlying content is intended to harvest cryptocurrency recovery phrases while masquerading as an Apple service. The domain is currently offline, and the threat‑level assessment assigns an elevated risk rating. Detection data show that seven of ninety‑three VirusTotal scanners flagged the domain as malicious. Gridinsoft assigns a trust score of zero out of one hundred, and the domain appears on a single external blocklist. PhishDestroy has actively blocked the host.

The combination of a zero trust score, multiple vendor detections, and inclusion on a phishing blocklist confirms the malicious intent despite the lack of a valid SSL certificate. Open questions remain regarding the exact phishing payload, user‑experience flow, and any additional infrastructure such as command‑and‑control servers, because the page content has not been publicly disclosed. Analysts should continue to monitor the domain for any re‑registration or changes in hosting, enforce blocklist rules for the IP address 104.21.73.196, and ensure that endpoint protection solutions flag any connections to this host. Organizations that rely on Apple services should educate users about unsolicited requests for wallet seeds and recommend verification of URLs before entering sensitive credentials.