us06webzoom[.]org

us06webzoom.org was registered on 20 October 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative name servers ns3.loominost.com and ns4.loominost.com resolve the domain to IP address 209.182.224.202, which belongs to Shock Hosting LLC (AS395092) in the United States. No TLS certificate is present, indicating HTTP‑only delivery. The only visible page title returned by the server is “Index of /”, a generic directory listing that provides no functional content.

Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. Detection services on VirusTotal flagged the domain in 5 out of 95 scanners, confirming that at least a subset of AV engines recognise malicious behavior. PhishDestroy has already taken the site offline, and current network probes report the host as unavailable. The combination of a newly created domain, low‑reputation registrar, lack of encryption, and multiple vendor detections strongly suggests a phishing infrastructure, even though the exact payload or targeted brand has not been disclosed.

Defensive teams should add 209.182.224.202 to network block lists, enforce DNS filtering for us06webzoom.org, and monitor for any re‑hosting attempts under the same registrar or name‑server patterns. Continuous telemetry from sandbox and URL‑reputation services is advised to capture any future re‑activation. Until the domain is definitively cleaned, it should be treated as a high‑confidence phishing indicator.