# web-zoom.us — SUSPICIOUS

> PhishDestroy detects phishing on web-zoom.us. SSL-backed domain flagged by 4/95 scanners, created March 24, 2026. Check the full report.

## Summary
PhishDestroy identifies an active phishing domain named web-zoom.us posing as the legitimate Zoom service. This site uses a Let’s Encrypt SSL certificate and Cloudflare registration to appear authentic, but it was created on March 24, 2026—indicating a very recent and opportunistic setup designed to exploit unsuspecting users during a period of high remote collaboration reliance. The domain resolves to IP 188.114.96.3 and is currently blocked by MetaMask and SEAL security systems, underscoring its malicious intent. Moreover, VirusTotal analysis shows four out of 95 participating security vendors have flagged this domain as malicious, and it appears on two separate threat intelligence blocklists, placing it on elevated alert status for potential fraudulent activity.  This domain is not merely suspicious—it is actively engaged in phishing. The combination of a fresh domain age, rapid deployment on a reputable hosting provider via Cloudflare, and partial detection by recognized security tools suggests a sophisticated attempt to harvest login credentials and sensitive data under the guise of Zoom services. The use of a valid SSL certificate further lowers user suspicion, making it a prime candidate for credential theft, malware delivery, or financial fraud. Its rapid inclusion in multiple blocklists reflects a growing consensus among cybersecurity platforms regarding its harmful nature.  Users who have visited web-zoom.us must take immediate action. First, disconnect from the site and do not enter any credentials or personal information. Second, scan your device with updated antivirus software to detect any potential malware. Third, change passwords for Zoom and related accounts—especially if you entered login details. Finally, report the domain to your IT team or cybersecurity provider and consider using phishing protection tools like browser-based safety extensions. Do not trust the domain regardless of its SSL certificate or professional appearance. Act swiftly to prevent account takeover or data compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 23:40:22
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a0e268b7-1f04-4368-9150-fe750572d9bb
- PhishDestroy: https://phishdestroy.io/domain/web-zoom.us/
- LLM endpoint: https://phishdestroy.io/domain/web-zoom.us/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web-zoom.us/
Last updated: 2026-03-27