superapp[.]zebecs[.]xyz

Analysis of superapp.zebecs.xyz indicates that the domain was registered on 27 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare’s network (AS13335) with the IP address 172.67.164.67 located in the United States. The domain resolves to Cloudflare name servers audrey.ns.cloudflare.com and rohin.ns.cloudflare.com and does not present an SSL/TLS certificate, which is atypical for legitimate services and reduces transport security. The site is presently offline, as indicated by the report status, and the page title that was observed when the site was active reads “Un instant…”, offering no further context about the content served. Reputation data show that the domain appears on three independent phishing blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal analysis recorded two positive detections out of ninety‑three scanned scanners, reinforcing the suspicion of malicious intent. Independent trust‑rating services assign a Gridinsoft score of 0 out of 100, effectively marking the host as untrusted. No additional intelligence such as Safe Browsing, OTX, or specific malware kit identifiers is available.

The combined evidence—recent registration, Cloudflare‑based hosting without TLS, low trust score, presence on multiple blocklists, and positive detections by security scanners—supports a classification of elevated‑risk phishing infrastructure. Defenders should continue to block the domain at perimeter devices, update URL filtering and DNS sinkhole lists with the observed IP address, and monitor the registrar for any future registrations that may reuse the same infrastructure. Because the site is currently offline, active investigation of the hosted content is limited; further observation may be required if the domain resurfaces.