ut03webzoom[.]us

Analysis of ut03webzoom.us indicates a high-risk credential phishing domain active since February 21, 2026. The domain is currently offline but was previously hosted on 188.227.197.32, an IP address geolocated in Canada under AS400897 (PETROSKY CLOUD LLC). Infrastructure review shows the domain was flagged by three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, suggesting targeted credential harvesting or financial fraud activity.

The SSL certificate, identified as R12, does not provide additional brand validation, and no legitimate organizational association is confirmed. VirusTotal scans from July 2026 recorded 12 detections out of 93 security vendors, reinforcing the classification as malicious. The domain's registration age (under six months at time of detection) and hosting provider align with patterns observed in short-lived phishing campaigns.

While the exact content or targeted brand remains unconfirmed, defenders should treat this domain as hostile and maintain blocking rules. No evidence links it to known phishing kits or specific brands. Network security teams are advised to monitor for residual DNS queries or attempts to re-enable the domain on alternative infrastructure.