web07us[.]uk07[.]us

This domain, web07us.uk07.us, is identified as a credential harvesting phishing site targeting users through deceptive login portals. Analysis indicates the infrastructure was designed to mimic legitimate services, tricking visitors into submitting sensitive authentication details such as usernames, passwords, and multi-factor authentication codes. The domain's design and hosting patterns align with known phishing campaigns that exploit social engineering to compromise accounts across financial, corporate, and personal platforms. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on June 1, 2026, an unusually future-dated creation that may suggest automated or bulk registration tactics. It resolves to the IP address 172.86.91.195 and is currently flagged by 14 out of 95 security vendors on VirusTotal, with one confirmed entry on a security blocklist. The domain has since been taken offline, though its prior operational status and detection metrics confirm its role in active phishing operations. Users who visited web07us.uk07.us or submitted credentials through any associated pages should immediately revoke access to any exposed accounts. Rotate passwords for all potentially compromised services, prioritizing those tied to financial, email, or administrative systems. Enable multi-factor authentication where available, and monitor accounts for unauthorized activity. If login credentials were reused across multiple platforms, update those as well to prevent lateral compromise. Review connected devices for signs of malware or unauthorized access, and report the incident to relevant security teams or incident response channels.