ur03webzoom[.]us

ur03webzoom.us was observed as a phishing infrastructure until it was taken offline before the report date of 25 July 2026. The domain was registered through NameSilo, LLC on 28 December 2025 and resolves to the IP address 83.136.211.187, which is allocated to AS400897 PETROSKY CLOUD LLC in France. No TLS certificate is present, indicating that any previous service would have been delivered over plain HTTP.

DNS resolution is handled by ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist where it is listed by PhishDestroy. VirusTotal scans report 16 positive detections out of 93 scanning engines, confirming that multiple vendors classify the domain as malicious.

The specific phishing lure, page title, or targeted brand were not disclosed, leaving the exact campaign vector and victim profile uncertain. Defenders should block the host IP 83.136.211.187, enforce DNS sink‑holing for ur03webzoom.us, and monitor the PETROSKY CLOUD hosting range for newly registered domains using the same name‑server set. Ongoing vigilance through periodic VirusTotal rescans and blocklist updates is advised to capture any re‑appearance of the infrastructure.