us07web-zoom[.]digital
“Проверка доступа”
Evidence Summary
The domain us07web-zoom.digital, designed to impersonate Zoom, has been flagged by PhishDestroy and identified as a phishing threat. Despite being taken down, it initially evaded detection with only 3 out of 95 VirusTotal vendors marking it as malicious. The domain was registered through PDR Ltd. and hosted on an IP in the Netherlands, under AS216071 SERVERS TECH FZCO.
This phishing operation leveraged the popular video conferencing brand Zoom to deceive users into providing sensitive information. The page title 'Проверка доступа' suggests an attempt to lure Russian-speaking users into a false sense of security by mimicking legitimate access verification processes. The use of Let's Encrypt for SSL certification further added a layer of legitimacy to the fraudulent site.
PhishDestroy's early detection of the domain on December 6, 2025, highlights the importance of rapid response in the fight against phishing. The domain's quick takedown underscores the effectiveness of collaborative efforts between cybersecurity entities and hosting providers. As this case demonstrates, phishing domains can exploit the critical window between registration and widespread detection, emphasizing the need for continuous monitoring and quick action.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive