zumw7[.]top

Analysis of the domain zumw7.top indicates it was a generic phishing site operating on infrastructure linked to malicious activity. The domain was registered on February 21, 2026, and resolved to the IP address 208.91.196.46, hosted under AS40034 (Confluence Networks Inc) in the United States. At the time of assessment, the domain appeared on three security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt, signaling elevated risk. Two of 93 security vendors on VirusTotal flagged the domain as malicious, though the specific detection context remains unverified.

The SSL certificate was issued by R10, a provider commonly associated with low-reputation or ephemeral domains. No brand impersonation or specific phishing kit was identified in the available data, and the exact content of the site was not analyzed. Infrastructure analysis reveals the domain was taken offline by July 25, 2026, likely due to detection and blocking by security vendors.

Defenders should treat this domain as malicious based on its presence on multiple blocklists and its association with a hosting provider linked to prior abuse. Network-level blocking of the IP 208.91.196.46 and monitoring for related domains under the same registrar or ASN is recommended. No further details about the phishing campaign, such as targeted sectors or lure techniques, are available at this time.