ue05webzoom[.]us

Analysis of the domain ue05webzoom.us indicates confirmed phishing infrastructure targeting users of web conferencing platforms. The domain was registered on November 17, 2025, through NameCheap, Inc., and resolves to the IP address 188.227.196.182, hosted under AS400897 (PETROSKY CLOUD LLC) in Canada. At the time of assessment on July 25, 2026, the domain is offline, though it previously exhibited characteristics consistent with phishing activity. No SSL certificate was detected, increasing the likelihood of unencrypted credential harvesting or malicious redirection.

The domain appears on at least one security blocklist, and PhishDestroy has flagged it as malicious. VirusTotal reports that 10 of 95 security vendors classify this domain as phishing-related, though the absence of additional context—such as page content or brand impersonation—limits further classification. The nameservers (dns1.registrar-servers.com and dns2.registrar-servers.com) are associated with the registrar rather than a dedicated malicious hosting provider, which is a common tactic to evade immediate detection. Given the domain's registration recency, hosting on a bulletproof ASN, and detection by multiple security vendors, defenders should treat this infrastructure as high-risk.

Network-level blocking of the IP 188.227.196.182 and domain ue05webzoom.us is recommended for organizations, particularly those utilizing web conferencing tools. Further investigation into associated domains registered under the same ASN or registrar may uncover additional phishing campaigns. The lack of an SSL certificate and the domain's abrupt takedown suggest an attempt to avoid scrutiny, reinforcing the need for proactive monitoring of similar patterns.