ua06webzoom[.]us

Analysis as of July 24 2026 indicates that ua06webzoom.us is currently offline but was actively flagged as a generic phishing domain. The domain was registered on February 21 2026 through NameSilo, LLC and is hosted on IP 83.136.211.187, which belongs to AS400897 PETROSKY CLOUD LLC located in France. The authoritative nameservers are ns1.dnsowl.com, ns2.dnsowl.com and ns3.dnsowl.com. No TLS certificate was observed, and the only HTTP response captured returned the default nginx page titled “Welcome to nginx!”. Gridinsoft assigned a trust score of 0 out of 100, indicating no confidence in the site’s legitimacy.

VirusTotal reports that 13 of 93 scanned security vendors flagged the domain, confirming malicious classification across multiple engines. The domain appears on one public security blocklist and is specifically blocked by the PhishDestroy service. The risk level has been assessed as elevated. The lack of an SSL certificate further reduces the credibility of any credential‑collection attempt. The presence of the default nginx page suggests the server is either misconfigured or intentionally left minimal to avoid content fingerprinting.

No additional intelligence such as OTX indicators or Safe Browsing reports were provided, leaving the exact phishing payload unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑activation, and consider adding the associated IP address to threat intelligence feeds. Security operations should treat any traffic to the domain as malicious, enforce existing blocklists, and update internal IOC repositories with the domain name, IP address, and associated nameservers. Continuous verification of the registrar’s abuse contact may also aid in takedown efforts.