us06-zoom-us[.]com

PhishDestroy identifies us06-zoom-us.com as an active generic phishing domain posing an elevated risk to users due to its deceptive resemblance to Zoom’s legitimate domains. This impostor site employs social engineering to trick victims into revealing sensitive information or downloading malware under the pretense of granting access to a Zoom meeting. The domain’s immediate association with a recognizable brand like Zoom increases the likelihood of user engagement and successful exploitation.

This domain was flagged by security vendors through VirusTotal with 2 out of 95 security engines detecting malicious activity, indicating emerging but confirmed threat potential. Registered via Registrar of Domain Names REG.RU LLC on May 04, 2026, the domain resolves to IP address 104.21.69.100 and uses a valid Let’s Encrypt SSL certificate to appear legitimate. Despite its recent creation, its use of the Russian phrase 'Проверка доступа' (Access Check) in the page title suggests a targeted approach that may exploit language or regional user expectations.

Users are strongly advised to avoid interacting with us06-zoom-us.com entirely. If accidentally accessed, refrain from entering any login credentials, downloading files, or enabling browser notifications. Organizations should update email security policies to block domains registered after May 2026 with REG.RU and include 104.21.69.100 in deny-lists. Users should report the domain to their IT security teams and run a full antivirus scan. Always verify meeting links by cross-checking the official Zoom domain (zoom.us) through secure, independent channels before accessing any video conferencing session.