Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
us05web-meet[.]com
“Index of /”
已存储的观测记录
观测到的标题差异
证据摘要
The domain us05web-meet.com was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently hosted on the IP address 101.99.93.38, which resolves to an autonomous system (AS45839) owned by Shinjiru Technology Sdn Bhd in Bulgaria. DNS records point to the authoritative nameservers ns1.aitscb.com and ns2.aitscb.com. The web server reports an Apache HTTP Server banner and presents a TLS certificate issued by Let’s Encrypt (R13), indicating that encrypted connections are available. An HTTP GET returns status code 200 and the sole page title is “Index of /”, suggesting a directory listing without additional content.
The site is classified as a brand‑impersonation campaign targeting Google, and the risk level is marked high with an active status. VirusTotal analysis shows that six of ninety‑three scanning engines have flagged the domain, and three independent blocklists already list it. Commercial filtering services such as PhishDestroy, MetaMask and SEAL have also blocked the domain. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment.
No further payload or credential‑harvesting pages have been observed in the public data, so the exact phishing kit or content remains unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP range, and add the domain and its nameservers to threat‑intel feeds. Given the active status and high risk rating, security teams should also consider automated sandbox retrieval of the site content to verify any future changes. Continuous re‑scanning with VirusTotal or similar services is advised to capture additional detections as the campaign evolves.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260206-9F9AB5- PDF 文件
- PDF 证据
完整证据文本
Acceptable Use Policy (AUP): The domain us05web-meet.com is engaged in phishing activities, which directly contravenes your AUP prohibiting illegal activities and deception.
Terms of Service (TOS): The use of this domain for fraudulent purposes constitutes a violation of your TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (US):
Computer Fraud and Abuse Act (CFAA) - 18 U.S.C. § 1030: This law prohibits unauthorized access to computers and the use of fraudulent schemes to obtain information, which applies to phishing activities.
Wire Fraud - 18 U.S.C. § 1343: Engaging in schemes to defraud individuals through electronic communications, including phishing, is a violation of this statute.
CAN-SPAM Act - 15 U.S.C. § 7701: This act regulates commercial email and prohibits deceptive practices, including the use of misleading subject lines and sender information, as seen in phishing attempts.
Regulatory Note: Failure to take prompt action against this domain may expose your organization to liability under applicable laws and regulations. Immediate suspension is advised to mitigate risk and uphold compliance with your policies.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控