uk03[.]web-zoom[.]uk

This domain is flagged as an elevated-risk phishing infrastructure specifically designed to impersonate Zoom services. Analysis indicates it operates under the threat category of generic_phishing, with a primary objective of harvesting user credentials through fraudulent login portals or deceptive communications. Infrastructure analysis reveals the following technical indicators: the domain uk03.web-zoom.uk resolves to IP address 45.61.129.29, hosted under AS14956 (RouterHosting LLC) in the United States. It was registered on February 09, 2026, through Realtime Register BV t/a Axidomains (registrar tag AXIDOMAINS). No SSL certificate is present, increasing the likelihood of unencrypted data transmission. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. VirusTotal detection metrics show 18 out of 95 security vendors flagging the domain as malicious, with a page title matching the domain name itself, a common tactic in phishing site spoofing. To mitigate risks associated with this phishing infrastructure, organizations and users should immediately block the domain and its associated IP (45.61.129.29) at the network perimeter. Security teams should monitor for any inbound or outbound connections to this infrastructure, particularly from endpoints that may have interacted with Zoom-related communications. End-users should be advised to verify the legitimacy of any Zoom-related login pages by checking the URL for anomalies, ensuring HTTPS encryption, and cross-referencing with official Zoom domains. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.