us04www-zoom[.]us

The domain us04www-zoom.us was registered through NameCheap, Inc. on 2025-06-04 and is presently taken offline. Infrastructure analysis shows it resolves to 23.254.247.53, an address hosted by Hostwinds LLC (AS54290) in the United States. DNS services are provided by dns1.registrar-servers.com and dns2.registrar-servers.com, and its mail exchange records point to eforward3.registrar-servers.com at priority 10. The site presented the page title “Google Public DNS,” indicating an explicit attempt to impersonate Google’s brand.

The SSL certificate presented during the brief live window was issued by Google Trust Services under the “WR2” profile, a further indicator of deliberate brand misuse. Detection metrics reveal that fifteen of ninety‑three security vendors on VirusTotal flagged the domain, and it appears on a single external security blocklist. PhishDestroy has also listed the domain as blocked. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment.

While the site’s content has not been captured, the combination of brand‑targeted title, legitimate‑looking certificate, and multiple vendor detections aligns with a classic brand‑impersonation campaign aimed at deceiving users into trusting the domain for malicious purposes. Defenders should continue to monitor the IP address 23.254.247.53 for any reactivation, enforce blocking of the domain at perimeter defenses, and consider adding the associated nameservers and MX host to deny‑list rules. Additional telemetry from endpoint and network logs should be correlated for any attempts to resolve or contact the domain prior to its takedown, as remnants of the campaign may persist in cached DNS or email forwarding configurations.