us03webuoom[.]us

The domain us03webuoom.us was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IPv4 address 188.227.197.32, which is hosted in Canada under AS400897 owned by PETROSKY CLOUD LLC. The authoritative name servers are ns1.dnsowl.com, ns2.dnsowl.com and ns3.dnsowl.com, indicating the use of the DNSOWL service for resolution. Security telemetry shows the domain is listed on three public blocklists and has been actively blocked by the PhishDestroy, MetaMask and SEAL filtering platforms.

On VirusTotal, 14 of 93 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The site’s SSL certificate is identified as R13, and the Gridinsoft trust score is 0 out of 100, suggesting a lack of reputation or confidence in the host. Although the exact phishing payload or impersonated brand has not been disclosed, the classification as generic phishing combined with the detection history points to a high‑risk profile.

Defenders should ensure that any outbound connections to 188.227.197.32 are denied, update firewall and proxy rules to include the listed nameservers, and add the domain to internal blocklists. Continuous monitoring of the IP address for any re‑use and periodic re‑scans of the domain, should it reappear, are advised. Organizations using the blocked security products should verify that their respective filters have correctly quarantined the domain and consider broader threat‑intel sharing to reduce exposure to similar campaigns.