us05web[.]us

PhishDestroy first observed us05web.us on Jan 23, 2026. The captured page title is “us05web.us | 526: Invalid SSL certificate”. Campaign clustering links the hostname to the Airdrop Scam kit. Current evidence score: 78/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 9 detections among 95 engines: alphaMountain.ai, CRDF, CyRadar, ESTsecurity, Forcepoint ThreatSeeker, Lionic, PhishFort, Seclookup, SOCRadar on Jul 18, 2026 at 20:45 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories malware, security risks, parked & for sale domains, and security threats; its verdict timestamp was not retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:55 UTC.

HTTP 502 server error was recorded on Aug 7, 2026 at 22:15 UTC. Registration records for the domain list NameCheap, Inc. as the registrar. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Jul 19, 2026 at 02:20 UTC returned 78/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Apr 19, 2026; checked Mar 15, 2026 at 05:41 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.