ut02webzoom[.]us

The domain ut02webzoom.us was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 188.227.197.32, which is announced by AS400897 (PETROSKY CLOUD LLC) and geolocated to Canada. The hosting provider therefore appears to be a cloud service that can be leveraged for short‑lived malicious infrastructure. Gridinsoft assigns the domain a trust score of 0 out of 100, indicating a complete lack of reputation.

The domain is listed on three public blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filters, reinforcing its classification as a phishing vector. TLS inspection shows the site presented an R12‑level SSL certificate, which is commonly associated with low‑cost or free certificates and does not provide assurance of legitimate ownership. VirusTotal scanned the domain and 13 of 93 security vendors reported it as malicious, corroborating the blocklist findings.

No additional intelligence such as page title, targeted brand, or kit information is available, so the exact phishing campaign payload remains unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the IP address or related AS, and update detection signatures to reflect the observed trust score and blocklist status. Because the site is offline, any ongoing phishing attempts are likely paused, but the infrastructure could be re‑activated, so continuous watch‑listing is advised.