uc05websoom[.]us

PhishDestroy first observed uc05websoom.us on Feb 26, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 14 detections among 91 engines: ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, ESET, ESTsecurity, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, Sophos, VIPRE on Aug 1, 2026 at 02:24 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 02:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 03:21 UTC.

HTTP 502 server error was recorded on Aug 7, 2026 at 22:15 UTC. The recorded creation date for the domain is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 188.227.197.32 on AS400897 (PETROSKY - PETROSKY CLOUD LLC, US). The recorded endpoint location is Montréal, CA. The stored server header is nginx/1.28.1. DOM analysis on Mar 24, 2026 at 01:22 UTC returned 95/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists R13 as the certificate issuer.

The record contains 3 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.