us05-webzoom[.]us

PhishDestroy identifies us05-webzoom.us as a crypto drainer actively impersonating a legitimate Zoom webinar platform to steal cryptocurrency funds. This domain mimics familiar video conferencing interfaces to trick users into connecting wallets or entering seed phrases, enabling unauthorized transfers from victim-controlled addresses. Security researchers and browser extensions like MetaMask have already flagged this domain as malicious, confirming its role in active cryptocurrency theft campaigns. This domain was flagged by 3 out of 95 VirusTotal security vendors, registered through Cloudflare on March 24, 2026, and appears on multiple blocklists. The domain resolves to IP address 172.67.214.85 and holds a valid Let’s Encrypt SSL certificate, which may lend false legitimacy to unsuspecting users. Its recent creation date and association with Cloudflare registration suggest a short-lived campaign designed for rapid deployment and evasion of early detection systems. If you visited us05-webzoom.us, immediately disconnect your wallet from any connected applications and revoke permissions through your wallet provider’s security settings. Do not enter any credentials or approve transactions. Run a full antivirus scan and clear browser cache and cookies. Report the domain to your antivirus provider and consider using a hardware wallet for future transactions to mitigate risk of unauthorized access.