facebook[.]meweb[.]kz

The domain facebook.meweb.kz, observed on July 15, 2026, is classified as a generic_phishing threat with a high risk rating. Infrastructure analysis shows the domain resolves to the IPv4 address 195.210.46.27 and is serviced by three nameservers—ns1.ps.kz, ns2.ps.kz, and ns3.ps.kz—registered under the .kz top‑level domain. VirusTotal scanning indicates that one of ninety‑one security vendors flagged the domain, confirming the presence of malicious activity. The domain remains active at the time of reporting. Current intelligence does not provide details about the hosting provider, ASN, or any associated phishing kit, leaving the full scope of the campaign uncertain. Defenders should prioritize the domain for blocking at perimeter defenses and incorporate the IP address 195.210.46.27 into threat intelligence feeds. Continuous monitoring for any changes in detection counts or additional associated infrastructure is advised to capture potential expansion of the campaign.