us07web-zoom[.]digital

The domain us07web-zoom.digital, designed to impersonate Zoom, has been flagged by PhishDestroy and identified as a phishing threat. Despite being taken down, it initially evaded detection with only 3 out of 95 VirusTotal vendors marking it as malicious. The domain was registered through PDR Ltd. and hosted on an IP in the Netherlands, under AS216071 SERVERS TECH FZCO.

This phishing operation leveraged the popular video conferencing brand Zoom to deceive users into providing sensitive information. The page title 'Проверка доступа' suggests an attempt to lure Russian-speaking users into a false sense of security by mimicking legitimate access verification processes. The use of Let's Encrypt for SSL certification further added a layer of legitimacy to the fraudulent site.

PhishDestroy's early detection of the domain on December 6, 2025, highlights the importance of rapid response in the fight against phishing. The domain's quick takedown underscores the effectiveness of collaborative efforts between cybersecurity entities and hosting providers. As this case demonstrates, phishing domains can exploit the critical window between registration and widespread detection, emphasizing the need for continuous monitoring and quick action.