uz06web[.]us

This domain, uz06web.us, is actively engaged in credential harvesting phishing operations designed to deceive users into submitting login credentials, financial details, or other sensitive information. Analysis indicates the infrastructure is configured to mimic legitimate authentication portals, likely targeting webmail, financial services, or cryptocurrency platforms. The domain’s deceptive design and technical indicators align with known phishing campaigns aimed at compromising user accounts through fraudulent input forms or cloned interfaces. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, through NameCheap, Inc., and currently resolves to the IP address 66.29.132.149. Security vendors have flagged uz06web.us in 16 out of 95 detection engines on VirusTotal, while it appears on four independent security blocklists. The server runs LiteSpeed web server technology, a common choice for both legitimate and malicious hosting environments. Additionally, the domain has been explicitly blocked by multiple security tools, including MetaMask, SEAL, PhishDestroy, and Maltrail, further corroborating its role in phishing operations. Users who have visited uz06web.us or interacted with its content should take immediate remedial action. Any credentials entered on this domain must be considered compromised and should be changed immediately across all platforms where the same passwords were reused. System scans using updated security tools are recommended to detect potential malware or unauthorized access. Network-level blocking of the domain and its associated IP address (66.29.132.149) is advised to prevent further exposure. Organizations should review logs for connections to this infrastructure and assess potential data exposure or unauthorized access attempts originating from affected endpoints.